CyberSecurity updates
Updated: 2024-10-10 06:23:37 Pacfic

Flag This

Critical CUPS Vulnerability Allows Unauthenticated Remote Code Execution - 12d

A critical vulnerability (CVE-2024-7120) has been discovered in the Common Unix Printing System (CUPS) software, affecting a wide range of Linux distributions. This vulnerability allows attackers to execute arbitrary code remotely without any authentication, potentially leading to a complete compromise of vulnerable systems. The vulnerability arises from CUPS’s handling of print jobs, where an attacker can exploit a flaw in its processing to gain unauthorized access and execute malicious code. This flaw is particularly concerning as it can be exploited remotely, allowing attackers to compromise systems without any user interaction. Organizations using CUPS are strongly advised to prioritize patching their systems with the latest security updates to mitigate this critical vulnerability. Failure to do so could result in significant data breaches, disruption of operations, and potential system control by malicious actors.

References:

  • SANS Internet Storm Center, InfoCON: green - SANS ISC offers a detailed technical analysis of the CUPS vulnerability and its potential consequences. - 13d
  • Malware Analysis, News and Indicators - Latest topics - Malware.news provides an update on the critical CUPS vulnerability and urges users to prioritize patching. - 13d
  • Threats | CyberScoop - Printer bug sends researchers into uproar, affects major Linux distros - 12d
  • Vulnerability Archives ? Cybersecurity News - Critical CUPS Vulnerabilities Expose Linux and Other Systems to Remote Attacks - 12d
  • CyberInsider - This article covers the recent discovery of zero-day vulnerabilities in CUPS that can be exploited for remote code execution. - 12d
  • Malware Analysis, News and Indicators - Latest topics - This article summarizes the CUPS vulnerabilities and the impact they can have - 12d
  • SOCRadar? Cyber Intelligence Inc. - This article talks about CUPS vulnerabilities and the potential risks they pose - 12d
  • Red Hat Security - This Red Hat blog post addresses the CUPS vulnerability, outlining their response and the steps they are taking to mitigate the issue. - 12d
  • Arctic Wolf - On 26 September 2024, a security researcher disclosed several vulnerabilities affecting Common UNIX Printing System (CUPS) within GNU/Linux distributions. CUPS is an open-source printing system that allows Unix-like operating systems, including Linux and MacOS, to manage printers and print jobs across local and networked environments.  The newly identified CUPS vulnerabilities identified are:  CVE-2024-47176: In CUPS-browsed - 12d
  • Security Affairs - CUPS flaws allow remote code execution on Linux systems under certain conditions - 12d
  • SCM feed for Security Strategy, Plan, Budget - A summary of the CUPS vulnerabilities and their impact on various Linux distributions. - 12d
  • securityonline.info - News article about the CUPS vulnerabilities and their impact. - 12d
  • Security Risk Advisors - This blog post by Simone Margaritelli discusses the critical CUPS vulnerabilities that enable remote code execution on Linux systems. - 11d
  • Malware Analysis, News and Indicators - Latest topics - CUPS vulnerabilities put Linux systems at risk of remote code execution - 11d
  • SCM feed for Security Strategy, Plan, Budget - CUPS vulnerabilities put Linux systems at risk of remote code execution - 11d
  • Arctic Wolf - Multiple Vulnerabilities Disclosed in Linux-based CUPS Printing Service - 11d
  • www.scworld.com - Major Linux distributions hit by OpenPrinting CUPS flaws - 11d
  • Malware Analysis, News and Indicators - Latest topics - Malware.news article focusing on the CUPS vulnerability and its potential impact. - 11d
  • News | CSO Online - A security researcher has developed an exploit that leverages several vulnerabilities in CUPS (common UNIX printing system), the default printing system on most Linux systems. The exploit chain allows attackers to remotely register a rogue printer device on the system and then execute commands as root if the user directs a printing job to it. Simone Margaritelli, a security researcher and creator of the bettercap open-source network reconnaissance tool, despite not all of them being patched after his report and proof-of-concept exploit was somehow leaked during the disclosure process and appeared on a cybercrime forum. Margaritelli also expressed frustration with the disclosure process which, according to him, involved 22 days of back and forth trying to convince the CUPS developers that the problems pose a serious security threat and are worth fixing. - 11d
  • Malware Analysis, News and Indicators - Latest topics - This article summarizes the CUPS vulnerabilities and detection methods. - 10d
  • sysdig.com - This article provides a detailed analysis of the CUPS vulnerabilities and mitigation strategies. - 10d
  • ASEC - An update has been released to address vulnerabilities in CUPS Products. - 9d

Classification:

  • HashTags: #CUPS #RCE #LinuxSecurity
  • Target: Linux Systems
  • Product: CUPS
  • Type: Vulnerability
  • Severity: Disaster






This site is an experimental news aggregator using feeds I personally follow. You can reach me using contacts here if you have feedback. You can also find Flathis at Mastodon.