Aller au contenu
Se connecter
Non notée

CVE-2018-6553 The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links

Description

The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS.

Produits et versions touchés

Produit Versions touchées Corrigé en
CUPS 1.7 premières → < 1.7.2-0ubuntu1.10 1.7.2-0ubuntu1.10

Autres CVE de CUPS

Les 2 CVE de CUPS →
CVE-2018-4300 The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access… Non notée
Suivre cette CVE