SUSE-SU-2018:2162-1: cups&distro=SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 01-08-2018Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2018:2162-1 is a vulnerability in cups&distro=SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 5 · Downstream 0 · Related 5
CVE-2017-18248CVE-2018-4180CVE-2018-4181CVE-2018-4182CVE-2018-4183

Timeline

  1. 01-08-2018
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for cups This update for cups fixes the following issues: The following security vulnerabilities were fixed: - CVE-2017-18248: Handle invalid characters properly in printing jobs. This fixes a problem that was causing the DBUS library to abort the calling process. (bsc#1061066 bsc#1087018) - Fixed a local privilege escalation to root and sandbox bypasses in the scheduler - CVE-2018-4180: Fixed a local privilege escalation to root in dnssd backend (bsc#1096405) - CVE-2018-4181: Limited local file reads as root via cupsd.conf include directive (bsc#1096406) - CVE-2018-4182: Fixed a sandbox bypass due to insecure error handling (bsc#1096407) - CVE-2018-4183: Fixed a sandbox bypass due to profile misconfiguration (bsc#1096408) The following other issue was fixed: - Fixed authorization check for clients (like samba) connected through the local socket when Kerberos authentication is enabled (bsc#1050082)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse4 products
  • cups&distro=SUSE Linux Enterprise Desktop 12 SP3< 1.7.5-20.14.1
  • cups&distro=SUSE Linux Enterprise Server 12 SP3< 1.7.5-20.14.1
  • cups&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 1.7.5-20.14.1
  • cups&distro=SUSE Linux Enterprise Software Development Kit 12 SP3< 1.7.5-20.14.1

1 vendor · 4 products

References

13 links
Show all 13 references