First published: Tue Nov 19 2019(Updated: )
foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Linuxfoundation Foomatic-filters | ||
Debian Debian Linux | =8.0 | |
Debian Debian Linux | =9.0 | |
Debian Debian Linux | =10.0 | |
debian/foomatic-filters | <=4.0.17-12<=4.0.17-16 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.