VDB
GCVE-110-MAGEIA-2015-132
GCVE-110-MAGEIA-2015-132
Advisory Published
Updated cups-filters package fixes security vulnerability:
cups-browsed in cups-filters before 1.0.66 contained a bug in the
remove_bad_chars() function, where it failed to reliably filter out illegal
characters if there were two or more subsequent illegal characters, allowing
execution of arbitrary commands with the rights of the "lp" user, using forged
print service announcements on DNS-SD servers (CVE-2015-2265).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | cups-filters | 0 (affected), 1.0.53-1.1.mga4 (unaffected) | — |
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.