5.3
CVSSv3

CVE-2017-18248

Published: 26/03/2018 Updated: 13/07/2018
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 5.3 | Impact Score: 3.6 | Exploitability Score: 1.6
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P

Vulnerability Summary

The add_job function in scheduler/ipp.c in CUPS prior to 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apple cups

Vendor Advisories

Several security issues were fixed in CUPS ...