A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cups | Jan 4, 2021 | Oct 27, 2020 |
| Apple Osx Cups | — | Apply OS X security update 2019-007 High SierraUpgrade macOS to the latest versionApply OS X security update 2019-002 Mojave | Dec 11, 2019 | Dec 11, 2019 |
| Debian | — | Upgrade cups | Jun 9, 2020 | Jun 9, 2020 |
| Freebsd | — | Upgrade cups | Jun 25, 2020 | Jun 24, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cups-libs | Nov 3, 2022 | Oct 27, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cups-libs | Nov 15, 2022 | Oct 27, 2020 |
| Suse | — | Upgrade libcupscgi1Upgrade libcupsmime1Upgrade cups-clientUpgrade libcupsmime1-32bitUpgrade cups-develUpgrade libcupscgi1-32bitUpgrade libcupsppdc1Upgrade libcupsppdc1-32bitUpgrade libcupsimage2-32bitUpgrade cups-configUpgrade cups-devel-32bitUpgrade libcups2-32bitUpgrade libcups2Upgrade cups-ddkUpgrade cups-libsUpgrade cups-libs-32bitUpgrade cupsUpgrade libcupsimage2 | Feb 3, 2021 | Apr 28, 2020 |
| Ubuntu | — | Upgrade cupsUpgrade cups (Ubuntu Pro) | Jun 2, 2022 | Apr 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub