First published: Thu Sep 26 2024(Updated: )
Simone Margaritelli discovered that libcupsfilters incorrectly sanitized IPP data when creating PPD files. A remote attacker could possibly use this issue to manipulate PPD files and execute arbitrary code when a printer is used.
Affected Software | Affected Version | How to fix |
---|---|---|
OpenPrinting CUPS-Filters |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
USN-7044-1 is classified as a medium severity vulnerability affecting the handling of IPP data in libcupsfilters.
To fix USN-7044-1, update libcupsfilters to version 2.0.0-0ubuntu7.1 or newer on affected Ubuntu systems.
Users of Ubuntu 24.04 with libcupsfilters versions prior to 2.0.0-0ubuntu7.1 are affected by USN-7044-1.
An attacker exploiting USN-7044-1 could manipulate PPD files and potentially execute arbitrary code when a printer is used.
USN-7044-1 was disclosed to address a vulnerability in libcupsfilters related to IPP data sanitization.