https://aegrah.github.io/categories/cve.htmlRecent content in CVE on RGROSECHugo -- gohugo.ioenCopyright © Ruben GroenewoudSat, 28 Sep 2024 12:00:00 +0200https://aegrah.github.io/post/2024-09-28-cups-overflow.htmlSat, 28 Sep 2024 12:00:00 +0200https://aegrah.github.io/post/2024-09-28-cups-overflow.html At Elastic Security Labs, we analyzed a critical set of vulnerabilities in the CUPS printing system, disclosed by security researcher Simone Margaritelli (@evilsocket) on September 26, 2024. These flaws, affecting CUPS versions ≤ 2.0.1, enable unauthenticated remote attackers to achieve remote code execution (RCE) via the Internet Printing Protocol (IPP) and mDNS, exploiting UDP port 631. Key weaknesses include input validation flaws in cups-browsed, libcupsfilters, and libppd, as well as the long-unpatched foomatic-rip filter.