CVE-2017-15400 Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD f...
HighCVSS 7.8
EPSS 0.86%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file, aka a printer zeroconfig CRLF issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/cups(Debian:12) | < 2.2.3-2 | 2.2.3-2 |
| debian/cups(Debian:13) | < 2.2.3-2 | 2.2.3-2 |
| debian/cups(Debian:14) | < 2.2.3-2 | 2.2.3-2 |
| Google chrome os | < 62.0.3202.74 | 62.0.3202.74 |
References
- Debian Security Tracker CVE-2017-15400 vendor-advisory
- chromereleases.googleblog.com
- crbug.com
- GLSA-201908-08 vendor-advisory
- DSA-4243 vendor-advisory