VDB

GCVE-110-MAGEIA-2024-227

GCVE-110-MAGEIA-2024-227
Advisory Published
Vulnetix · Advisory published June 17, 2024
When starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument, providing world-writable access to the target.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiamariadb10.11.10-1.mga9 (unaffected), 0 (affected)—
Mageiacups0 (affected), 2.4.6-1.2.mga9 (unaffected), 0 (affected), 2.4.6-1.2.mga9 (unaffected)—

References

Updated cups packages fix security vulnerability
advisory
Updated cups packages fix security vulnerability
issue
Updated cups packages fix security vulnerability
issue
Updated mariadb packages fix many crashes
advisory
Updated mariadb packages fix many crashes
issue
Updated mariadb packages fix many crashes
issue

Browse GCVE Records

73,866 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›