Critical Linux bug is CUPS-based remote-code execution hole
WEB5 days ago · What you need to know for now, according to Margaritelli, is: Disable and/or remove the cups-browsed service. Update your CUPS installation to bring in security updates if or when available. Consider blocking access to UDP port 631, and blocking off DNS-SD, too. It affects "most" Linux distros, "some" …
Critical Linux CUPS Printing System Flaws Could Allow Remote …
WEB4 days ago · A new set of security vulnerabilities has been disclosed in the OpenPrinting Common Unix Printing System (CUPS) on Linux systems that could permit remote command execution under certain conditions. "A remote unauthenticated attacker can silently replace existing printers' (or install new ones) …
CUPS flaws enable Linux remote code execution, but there’s a catch
WEB5 days ago · CUPS (short for Common UNIX Printing System) is the most widely used printing system on Linux systems, and it is also generally supported on devices running Unix-like operating systems such as ...
Critical printing system bugs affect hundreds of thousands of Linux ...
WEB1 day ago · undefined Simone Margaritelli (@evilsocket) September 23, 2024. Margaritelli warns that at least 200-300,000 unique Internet-facing systems could become targets. The CUPS components are widespread and vulnerabilities affect most GNU/Linux distributions and some other UNIX systems. The researcher …
Ubuntu Patches 'Severe' Security Flaw in CUPS - OMG! Ubuntu
WEB4 days ago · The CUPS Security Vulnerability. Canonical explains in its security blog: “At its core, the vulnerability is exploited by tricking CUPS into generating an attacker-controlled PPD (PostScript Printer Description) file for a printer containing an arbitrary command.”. “Whenever the next print job is sent to the printer in question, the ...
Critical Unauthenticated RCE Flaws in CUPS Printing Systems
WEB5 days ago · FAQ: A critical set of unauthenticated Remote Code Execution (RCE) vulnerabilities in CUPS, affecting all GNU/Linux systems and potentially others, was disclosed today. These vulnerabilities allow a remote attacker to execute arbitrary code on a target system without valid credentials or prior access.
What We Know So Far About Zero-Day CUPS Vulnerabilities: CVE …
WEB1 day ago · On September 26, 2024, security researcher Simone Margaritellidisclosed the details of four OpenPrinting Common UNIX Printing System (CUPS) vulnerabilities, that, when chained together, can allow malicious actors to launch remote code execution (RCE) attacks on vulnerable systems.. CUPS is a widely used, open-source printing system that supports Linux and other Unix-like operating systems.
Critical doomsday Linux bug is CUPS-based vulnerability
WEB5 days ago · What you need to know for now, according to Margaritelli, is: Disable and/or remove the cups-browsed service. Update your CUPS installation to bring in security updates when available. Block access to UDP port 631 and consider blocking off DNS-SD, too. It affects "most" Linux distros, "some" BSDs, …
Critical Linux RCE in CUPS — What We Know and How to Prepare
WEB4 days ago · A critical remote code execution (RCE) vulnerability chain, which is believed to affect many Unix-like hosts, was disclosed on September 26, 2024. The vulnerable component is the Common Unix Printing System (CUPS), specifically cups-browsed. A chain of four vulnerabilities is required for a successful …
CUPS Remote Code Execution Vulnerability Fix Available
WEB5 days ago · Canonical’s security team has released updates for the cups-browsed, cups-filters, libcupsfilters and libppd packages for all Ubuntu LTS releases under standard support. The updates remediate CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, while CVE-2024-47177 is addressed by the other 3 vulnerabilities being patched.
- Some results have been removed