CVE-2017-18190: apple cups Authentication Bypass by Spoofing
Vulnerability summary
CVE-2017-18190 is a high (CVSS 7.5) Authentication Bypass by Spoofing vulnerability in apple cups. EPSS estimates a 2.92% chance of exploitation in the next 30 days, higher than 86.8% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 16-02-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS server (neither the OS nor the web browser is responsible for ensuring that localhost.localdomain is 127.0.0.1).
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS trend
Probability
2.92%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 2.92% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugs.chromium.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Suse13 products
- cups&distro=SUSE Linux Enterprise Desktop 12 SP2< 1.7.5-20.3.1
- cups&distro=SUSE Linux Enterprise Desktop 12 SP3< 1.7.5-20.3.1
- cups&distro=SUSE Linux Enterprise Server 12 SP1-LTSS< 1.7.5-20.3.1
- cups&distro=SUSE Linux Enterprise Server 12 SP2< 1.7.5-20.3.1
- cups&distro=SUSE Linux Enterprise Server 12 SP3< 1.7.5-20.3.1
Debian2 products
- cups< 2.2.3-2 | < 1.5.3-5+deb7u7
- debian_linuxEOL7.0 | 8.0
Alpine1 product
- cups< 2.2.2-r0
Apple1 product
- cups< 2.2.2
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04
Mageia1 product
- cups< 2.0.4-1.4.mga5
Ubuntu1 product
- cups< 1.7.2-0ubuntu1.9 | < 2.1.3-4ubuntu0.4
7 vendors · 20 products
References
16 links
lists.debian.org/debian-lts-announce/2018/07/msg00003.htmlMailing ListX Refsource MLISTThird Party Advisory- github.com/apple/cups/commit/afa80cb2b457bf8d64f775bed307588610476c41X Refsource MISCPatchThird Party Advisory
- lists.debian.org/debian-lts-announce/2018/02/msg00023.htmlMailing ListX Refsource MLISTThird Party Advisory
- bugs.chromium.org/p/project-zero/issues/detail?id=1048X Refsource MISCExploitIssue TrackingThird Party AdvisoryREPORT