A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cups | Jan 4, 2021 | Oct 27, 2020 |
| Apple Osx Cups | — | Apply OS X security update 2019-002 MojaveUpgrade macOS to the latest versionApply OS X security update 2019-007 High Sierra | Dec 11, 2019 | Dec 11, 2019 |
| Debian | — | Upgrade cups | Jun 9, 2020 | Jun 9, 2020 |
| Freebsd | — | Upgrade cups | Jun 25, 2020 | Jun 24, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cups-libs | Nov 3, 2022 | Oct 27, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cups-libs | Nov 15, 2022 | Oct 27, 2020 |
| Suse | — | Upgrade cups-libsUpgrade libcupsimage2Upgrade libcups2Upgrade cups-ddkUpgrade cupsUpgrade cups-libs-32bitUpgrade libcupsppdc1Upgrade libcupsppdc1-32bitUpgrade libcupsmime1Upgrade libcupsimage2-32bitUpgrade cups-clientUpgrade libcupsmime1-32bitUpgrade cups-devel-32bitUpgrade libcupscgi1-32bitUpgrade libcups2-32bitUpgrade cups-configUpgrade cups-develUpgrade libcupscgi1 | Feb 3, 2021 | Apr 28, 2020 |
| Ubuntu | — | Upgrade cupsUpgrade cups (Ubuntu Pro) | Jun 2, 2022 | Apr 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub