p PatchFirst

CVE-2017-15400

CVE-2017-15400

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file, aka a printer zeroconfig CRLF issue.

CVSS 7.8 · High · EPSS 0.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • google chrome os prior to 62.0.3202.74

    Versions
    • Google Chrome OS prior to 62.0.3202.74: Affected

    No fix published

  • cups Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.2.3-2

    Update to 2.2.3-2

  • cups Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.2.3-2

    Update to 2.2.3-2

  • cups Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.2.3-2

    Update to 2.2.3-2

Original sources

Check your server →