CUPS Vulnerability Allows Attackers to Execute Code
Security researchers at Secunia have discovered a vulnerability in the Cups printing system.
A vulnerability detected in the standard printing system on Linux and Mac OS X, Cups, has been assigned the CVE number 2007-4351.
In the original advisory the Secunia experts write that the problem is caused by an error in the "ippReadIO()" function in the "cups/ipp.c" file. The vulnerability occurs when IPP tags (Internet Printing Protocol) are executed. Attackers could exploit the vulnerability by sending an IPP request with carefully crafted "textWithLanguage" or "nameWithLanguage" tags. This overwrites a byte on the stack with a zero. If the attack succeeds, the attacker may be able to execute arbitrary code on the target system.
The error was found in Cups 1.3.3 although other versions may be affected. As an update is not available at present, security experts recommend restricting the use of the printing system to trusted network environments.
Issue 237/2020
Buy this issue as a PDF
News
-
Google’s Nearby Sharing Could Work with Linux
Google’s answer to Apple’s AirDrop feature is rumored to work with the Linux desktop.
-
System76 Launches Ryzen-Powered Laptop
The new System76 Serval WS includes a powerful AMD Ryzen CPU.
-
Linux Mint Drops Snap
Linux Mint has officially dropped their support for Canonical’s snap packages.
-
Lenovo Upping Their Linux Support
Lenovo is now offering full certification and Linux preinstalled hardware.
-
LPI Launches FOSSlife Website
Linux Professional Institute launches FOSSlife, a website for the FOSS community.
-
Tuxedo Computers Joins the Ryzen Bandwagon
Tuxedo Computers has released the Tuxedo Boot BA15 with an AMD Ryzen 3500 CPU.
-
Linux Apps on Windows Is Coming
Linux GUI apps will be coming to Windows Subsystem for Linux.
-
Linux Usage Is on the Rise
According to NetMarketShare, Linux saw a significant bump in usage during April.
-
Lenovo is Jumping on the Linux Laptop Bandwagon
PC and laptop maker Lenovo is set to release ThinkPad laptops pre-installed with Fedora Linux.
-
A New Linux Laptop Is in the Making
Manjaro Linux and TUXEDO computers have joined forces to develop the InfinityBook Manjaro.