Vulnerability in cups package - security update
Summary
DLA-3826-1: cups - security update. Affects cups versions < 2.2.10-6+deb10u10. Fixed in 2.2.10-6+deb10u10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The cups package is a printing system for Unix-like operating systems that allows users to print files from a computer to a printer. It provides a set of print services and drivers for various printer models. The cups package is widely used in Debian 10 ecosystem.
Vulnerability Detail
This security update addresses a vulnerability (CVE-2024-35235) in the cups package. The vulnerability allows an attacker to execute arbitrary code or cause a denial of service by sending a specially crafted print job to a vulnerable cups server. This can lead to unauthorized access, data loss, or disruption of printing services.
How To Fix
Minimum fixed version
2.2.10-6+deb10u10
This is the first release that contains the fix.
sudo apt-get install --only-upgrade cupsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability at the moment.
Conclusion
In conclusion, the cups package in Debian 10 is vulnerable to a security issue that can allow arbitrary code execution or denial of service. It is crucial to update the cups package to the latest version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for cups →
FAQ
The vulnerability allows an attacker to execute arbitrary code or cause a denial of service, potentially leading to unauthorized access, data loss, or disruption of printing services.
Users of the cups package in Debian 10 ecosystem are affected by this vulnerability.
There is no known exploit for this vulnerability at the moment.
Updating the cups package to the latest version is the recommended mitigation for this vulnerability.
More information about this vulnerability can be found in the Debian Security Advisory DLA-3826-1.
Related vulnerabilities
Recent vulnerabilities recorded for cups.
