Critical Vulnerability in cups-browsed: Remote Code Execution Risk
Summary
USN-7042-3: cups-browsed vulnerability. Affects cups-browsed versions < 2.0.1-0ubuntu2.1. Fixed in 2.0.1-0ubuntu2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
cups-browsed is a component of the Common UNIX Printing System (CUPS) that facilitates automatic printer discovery and configuration. It allows users to create and manage printers seamlessly, enhancing the printing experience on Ubuntu systems. However, it has been found vulnerable to a security flaw that could allow unauthorized remote access and manipulation of printer settings.
Vulnerability Detail
The vulnerability arises from a flaw in cups-browsed that allows it to create arbitrary printers from outside the local network. This issue, when combined with vulnerabilities in other printing components, could enable a remote attacker to connect to a system, create manipulated Printer Description (PPD) files, and execute arbitrary code when a printer is used. The flaw was discovered by Simone Margaritelli, leading to the release of an improved fix in USN-7042-2.
How To Fix
Minimum fixed version
2.0.1-0ubuntu2.1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade cups-browsedTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable the legacy CUPS printer discovery protocol to mitigate the risk until the package is updated. This can be done by modifying the CUPS configuration files, specifically by setting 'BrowseRemoteProtocols none' in the cupsd.conf file.
Conclusion
The cups-browsed vulnerability poses a significant risk of remote code execution, necessitating immediate action to update the affected package. By following the outlined steps to update and applying the temporary workaround, users can protect their systems from potential exploitation.
See every vulnerability recorded for cups-browsed →
FAQ
cups-browsed is a service that automatically discovers and configures printers on a network, simplifying the printing process for users.
The vulnerability could allow remote attackers to execute arbitrary code on the affected system, potentially leading to unauthorized access and control.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Yes, you can disable the legacy CUPS printer discovery protocol as a temporary workaround until the package is updated.
It is recommended to regularly check for updates and security advisories for your installed packages to ensure your system remains secure.
References
Related vulnerabilities
Recent vulnerabilities recorded for cups-browsed.
