{"schemaVersion":3,"id":"USN-6844-2","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"cups regression\n\nUSN-6844-1 fixed vulnerabilities in the CUPS package. The update\nlead to the discovery of a regression in CUPS with regards to\nhow the cupsd daemon handles Listen configuration directive.\nThis update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\nRory McNamara discovered that when starting the cupsd server with a\nListen configuration item, the cupsd process fails to validate if\nbind call passed. An attacker could possibly trick cupsd to perform\nan arbitrary chmod of the provided argument, providing world-writable\naccess to the target.","dates":{"published":"2024-06-28T16:08:04.000Z","modified":"2026-06-25T13:32:28.911Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"cups","name":"cups","label":"cups","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/cups","purlType":"deb","versions":[{"text":"< 2.1.3-4ubuntu0.11+esm7","noFixRecorded":false,"fixedIn":null},{"text":"< 2.2.7-1ubuntu2.10+esm5","noFixRecorded":false,"fixedIn":null},{"text":"< 2.3.1-9ubuntu1.8","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.1op1-1ubuntu4.10","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.7-1.2ubuntu7.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.3-4ubuntu0.11+esm7 | < 2.2.7-1ubuntu2.10+esm5 | < 2.3.1-9ubuntu1.8 | < 2.4.1op1-1ubuntu4.10 | < 2.4.7-1.2ubuntu7.2","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-6844-2","label":"ubuntu.com/security/notices/USN-6844-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://launchpad.net/bugs/2070315","label":"launchpad.net/bugs/2070315","hostname":"launchpad.net","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-06-28T16:08:04.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-25T13:32:28.911Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:26:14.459Z","stale":false,"partial":false}}