Unauthenticated RCE Flaw Affects CUPS

[Germ]

Interesting, but how much of a threat is it really?

https://www.phoronix.com/news/Linux-CVSS-9.9-Rating

[doktor5000]

Well, the linked RedHat blog post covers that question pretty good: https://www.redhat.com/en/blog/red-hat- ... rabilities
So if you would have cups-browsed running and port 631 is accessible from the internet you would be affected.

[Germ]

Code: Select all

[germ@localhost ~]$ sudo systemctl status cups-browsed
[sudo] password for germ:
○ cups-browsed.service - Make remote CUPS printers available locally
     Loaded: loaded (/usr/lib/systemd/system/cups-browsed.service; disabled; preset: disabl>
     Active: inactive (dead)
lines 1-3/3 (END)