Page 1 of 1

Unauthenticated RCE Flaw Affects CUPS

PostPosted: Sep 27th, '24, 17:05
by Germ
Interesting, but how much of a threat is it really?

https://www.phoronix.com/news/Linux-CVSS-9.9-Rating

Re: Unauthenticated RCE Flaw Affects CUPS

PostPosted: Sep 27th, '24, 17:43
by doktor5000
Well, the linked RedHat blog post covers that question pretty good: https://www.redhat.com/en/blog/red-hat- ... rabilities
So if you would have cups-browsed running and port 631 is accessible from the internet you would be affected.

Re: Unauthenticated RCE Flaw Affects CUPS

PostPosted: Sep 27th, '24, 20:58
by Germ
Code: Select all
[germ@localhost ~]$ sudo systemctl status cups-browsed
[sudo] password for germ:
○ cups-browsed.service - Make remote CUPS printers available locally
     Loaded: loaded (/usr/lib/systemd/system/cups-browsed.service; disabled; preset: disabl>
     Active: inactive (dead)
lines 1-3/3 (END)