Red Hat Security AdvisoryRHSA-2014:1795
cups-filters security update
Released 2014-11-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) cups-filters-1.0.35-15.el7_0.1, cups-filters-libs-1.0.35-15.el7_0.1
- Red Hat Enterprise Linux Client Optional (v. 7) cups-filters-devel-1.0.35-15.el7_0.1
- Red Hat Enterprise Linux ComputeNode (v. 7) cups-filters-1.0.35-15.el7_0.1, cups-filters-libs-1.0.35-15.el7_0.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) cups-filters-devel-1.0.35-15.el7_0.1
- Red Hat Enterprise Linux Server (v. 7) cups-filters-1.0.35-15.el7_0.1, cups-filters-libs-1.0.35-15.el7_0.1, cups-filters-libs-1.0.35-15.el7_0.1.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) cups-filters-devel-1.0.35-15.el7_0.1, cups-filters-devel-1.0.35-15.el7_0.1.ppc
- Red Hat Enterprise Linux Workstation (v. 7) cups-filters-1.0.35-15.el7_0.1, cups-filters-libs-1.0.35-15.el7_0.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) cups-filters-devel-1.0.35-15.el7_0.1
Fixes 2 records
Priority LOW 25
The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted packet da…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02943 · Published 2014-06-22 · Fixed CWE-119
Priority LOW 24
cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpret…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.03007 · Published 2014-06-22 · Fixed CWE-264
