p PatchFirst

CVE-2019-2228

CVE-2019-2228

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-111210196

CVSS 5.5 · Medium · EPSS 0.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • android

    Versions
    • Android-8.0 Android-8.1 Android-9 Android-10: Affected

    No fix published

  • cups Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.3.1-1

    Update to 2.3.1-1

  • cups Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.3.1-1

    Update to 2.3.1-1

  • cups Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.3.1-1

    Update to 2.3.1-1

  • cups Ubuntu:16.04:LTS

    Versions
    • 2.1.0-4ubuntu3
    • 2.1.0-5
    • 2.1.0-6
    • 2.1.0-6ubuntu1
    • 2.1.0-7
    • 2.1.2-1
    • 2.1.2-2
    • 2.1.3-1
    • 2.1.3-1build1
    • 2.1.3-3
    • 2.1.3-4
    • 2.1.3-4ubuntu0.2
    • 2.1.3-4ubuntu0.3
    • 2.1.3-4ubuntu0.4
    • 2.1.3-4ubuntu0.5
    • 2.1.3-4ubuntu0.6
    • 2.1.3-4ubuntu0.7
    • 2.1.3-4ubuntu0.8
    • 2.1.3-4ubuntu0.9
    • 2.1.3-4ubuntu0.10
    Affected ranges
    • ECOSYSTEM: < 2.1.3-4ubuntu0.11

    Update to 2.1.3-4ubuntu0.11

  • cups Ubuntu:18.04:LTS

    Versions
    • 2.2.4-7ubuntu2
    • 2.2.5-2
    • 2.2.6-2
    • 2.2.6-3
    • 2.2.6-4
    • 2.2.6-5
    • 2.2.7-1ubuntu1
    • 2.2.7-1ubuntu2
    • 2.2.7-1ubuntu2.1
    • 2.2.7-1ubuntu2.2
    • 2.2.7-1ubuntu2.3
    • 2.2.7-1ubuntu2.4
    • 2.2.7-1ubuntu2.5
    • 2.2.7-1ubuntu2.6
    • 2.2.7-1ubuntu2.7
    Affected ranges
    • ECOSYSTEM: < 2.2.7-1ubuntu2.8

    Update to 2.2.7-1ubuntu2.8

Original sources

Check your server →