Debian/cups: high 7.5
A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon
Action: Upgrade cups to 2.2.3-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.3-2 | - |
Fixed versions
| 2.2.3-2 |
Sources
- osv: DEBIAN-CVE-2017-18190#Debian:14/cups
- https://security-tracker.debian.org/tracker/CVE-2017-18190
published · modified · JSON