CVE-2017-18248

The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
Affected Products (NVD)
VendorProductVersion
applecups
𝑥
< 2.2.6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
cups
bookworm
2.4.2-3+deb12u7
fixed
bookworm (security)
2.4.2-3+deb12u8
fixed
bullseye
2.3.3op2-3+deb11u8
fixed
bullseye (security)
2.3.3op2-3+deb11u9
fixed
sid
2.4.10-2
fixed
trixie
2.4.10-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
cups
artful
Fixed 2.2.4-7ubuntu3.1
released
bionic
not-affected
trusty
Fixed 1.7.2-0ubuntu1.10
released
xenial
Fixed 2.1.3-4ubuntu0.5
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
cups
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 12 SP3
1.7.5-20.14.1
fixed
suse enterprise sap 12 SP5
1.7.5-20.23.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 12 SP3
1.7.5-20.17.1
fixed
suse enterprise server 12 SP5
1.7.5-20.23.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
cups-client
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 12 SP3
1.7.5-20.14.1
fixed
suse enterprise sap 12 SP5
1.7.5-20.23.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 12 SP3
1.7.5-20.17.1
fixed
suse enterprise server 12 SP5
1.7.5-20.23.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
cups-config
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
cups-devel
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
cups-libs
suse enterprise sap 12 SP3
1.7.5-20.14.1
fixed
suse enterprise sap 12 SP5
1.7.5-20.23.1
fixed
suse enterprise server 12 SP3
1.7.5-20.17.1
fixed
suse enterprise server 12 SP5
1.7.5-20.23.1
fixed
cups-libs-32bit
suse enterprise sap 12 SP3
1.7.5-20.14.1
fixed
suse enterprise sap 12 SP5
1.7.5-20.23.1
fixed
suse enterprise server 12 SP3
1.7.5-20.17.1
fixed
suse enterprise server 12 SP5
1.7.5-20.23.1
fixed
libcups2
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
libcups2-32bit
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
libcupscgi1
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
libcupsimage2
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
libcupsmime1
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
libcupsppdc1
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
Common Weakness Enumeration
References
https://github.com/apple/cups/commit/49fa4983f25b64ec29d548ffa3b9782426007df3
https://github.com/apple/cups/issues/5143
https://github.com/apple/cups/releases/tag/v2.2.6
https://lists.debian.org/debian-lts-announce/2018/05/msg00018.html
https://lists.debian.org/debian-lts-announce/2018/07/msg00003.html
https://security.cucumberlinux.com/security/details.php?id=346
https://usn.ubuntu.com/3713-1/
https://github.com/apple/cups/commit/49fa4983f25b64ec29d548ffa3b9782426007df3
https://github.com/apple/cups/issues/5143
https://github.com/apple/cups/releases/tag/v2.2.6
https://lists.debian.org/debian-lts-announce/2018/05/msg00018.html
https://lists.debian.org/debian-lts-announce/2018/07/msg00003.html
https://security.cucumberlinux.com/security/details.php?id=346
https://usn.ubuntu.com/3713-1/