Buffer Overflow Affecting cups-client package, versions <1:2.2.6-33.el8


Severity

Recommended
low

Based on Oracle Linux security rating.

Threat Intelligence

EPSS
0.1% (42nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-ORACLE8-CUPSCLIENT-2557394
  • published10 Apr 2022
  • disclosed27 Oct 2020

Introduced: 27 Oct 2020

CVE-2019-8696  (opens in a new tab)
CWE-120  (opens in a new tab)

How to fix?

Upgrade Oracle:8 cups-client to version 1:2.2.6-33.el8 or higher.
This issue was patched in ELSA-2020-1765.

NVD Description

Note: Versions mentioned in the description apply only to the upstream cups-client package and not the cups-client package as distributed by Oracle. See How to fix? for Oracle:8 relevant fixed versions and status.

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code.

CVSS Scores

version 3.1