CVE-2019-8842

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.3 LOW
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
Affected Products (NVD)
VendorProductVersion
applemac_os_x
𝑥
< 10.15.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
cups
bookworm
2.4.2-3+deb12u7
fixed
bookworm (security)
2.4.2-3+deb12u8
fixed
bullseye
2.3.3op2-3+deb11u8
fixed
bullseye (security)
2.3.3op2-3+deb11u9
fixed
sid
2.4.10-2
fixed
trixie
2.4.10-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
cups
bionic
Fixed 2.2.7-1ubuntu2.9
released
eoan
ignored
focal
Fixed 2.3.1-9ubuntu1.2
released
groovy
not-affected
hirsute
not-affected
impish
not-affected
jammy
not-affected
trusty
dne
xenial
Fixed 2.1.3-4ubuntu0.11+esm1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
cups
suse enterprise desktop 15 SP2
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP5
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP6
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP7
2.2.7-3.20.1
fixed
suse enterprise sap 12 SP5
1.7.5-20.33.1
fixed
suse enterprise sap 15 SP2
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP5
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP6
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP7
2.2.7-3.20.1
fixed
suse enterprise server 12 SP3
1.7.5-20.33.1
fixed
suse enterprise server 12 SP5
1.7.5-20.33.1
fixed
suse enterprise server 15 SP2
2.2.7-3.20.1
fixed
suse enterprise server 15 SP3
2.2.7-3.20.1
fixed
suse enterprise server 15 SP4
2.2.7-3.20.1
fixed
suse enterprise server 15 SP5
2.2.7-3.20.1
fixed
suse enterprise server 15 SP6
2.2.7-3.20.1
fixed
suse enterprise server 15 SP7
2.2.7-3.20.1
fixed
cups-client
suse enterprise desktop 15 SP2
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP5
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP6
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP7
2.2.7-3.20.1
fixed
suse enterprise sap 12 SP5
1.7.5-20.33.1
fixed
suse enterprise sap 15 SP2
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP5
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP6
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP7
2.2.7-3.20.1
fixed
suse enterprise server 12 SP3
1.7.5-20.33.1
fixed
suse enterprise server 12 SP5
1.7.5-20.33.1
fixed
suse enterprise server 15 SP2
2.2.7-3.20.1
fixed
suse enterprise server 15 SP3
2.2.7-3.20.1
fixed
suse enterprise server 15 SP4
2.2.7-3.20.1
fixed
suse enterprise server 15 SP5
2.2.7-3.20.1
fixed
suse enterprise server 15 SP6
2.2.7-3.20.1
fixed
suse enterprise server 15 SP7
2.2.7-3.20.1
fixed
cups-config
suse enterprise desktop 15 SP2
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP5
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP6
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP7
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP2
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP5
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP6
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP7
2.2.7-3.20.1
fixed
suse enterprise server 15 SP2
2.2.7-3.20.1
fixed
suse enterprise server 15 SP3
2.2.7-3.20.1
fixed
suse enterprise server 15 SP4
2.2.7-3.20.1
fixed
suse enterprise server 15 SP5
2.2.7-3.20.1
fixed
suse enterprise server 15 SP6
2.2.7-3.20.1
fixed
suse enterprise server 15 SP7
2.2.7-3.20.1
fixed
cups-devel
suse enterprise desktop 15 SP2
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP5
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP6
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP7
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP2
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP5
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP6
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP7
2.2.7-3.20.1
fixed
suse enterprise server 15 SP2
2.2.7-3.20.1
fixed
suse enterprise server 15 SP3
2.2.7-3.20.1
fixed
suse enterprise server 15 SP4
2.2.7-3.20.1
fixed
suse enterprise server 15 SP5
2.2.7-3.20.1
fixed
suse enterprise server 15 SP6
2.2.7-3.20.1
fixed
suse enterprise server 15 SP7
2.2.7-3.20.1
fixed
cups-libs
suse enterprise sap 12 SP5
1.7.5-20.33.1
fixed
suse enterprise server 12 SP3
1.7.5-20.33.1
fixed
suse enterprise server 12 SP5
1.7.5-20.33.1
fixed
cups-libs-32bit
suse enterprise sap 12 SP5
1.7.5-20.33.1
fixed
suse enterprise server 12 SP3
1.7.5-20.33.1
fixed
suse enterprise server 12 SP5
1.7.5-20.33.1
fixed
libcups2
suse enterprise desktop 15 SP2
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP5
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP6
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP7
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP2
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP5
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP6
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP7
2.2.7-3.20.1
fixed
suse enterprise server 15 SP2
2.2.7-3.20.1
fixed
suse enterprise server 15 SP3
2.2.7-3.20.1
fixed
suse enterprise server 15 SP4
2.2.7-3.20.1
fixed
suse enterprise server 15 SP5
2.2.7-3.20.1
fixed
suse enterprise server 15 SP6
2.2.7-3.20.1
fixed
suse enterprise server 15 SP7
2.2.7-3.20.1
fixed
libcups2-32bit
suse enterprise desktop 15 SP2
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP2
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.20.1
fixed
suse enterprise server 15 SP2
2.2.7-3.20.1
fixed
suse enterprise server 15 SP3
2.2.7-3.20.1
fixed
suse enterprise server 15 SP4
2.2.7-3.20.1
fixed
libcupscgi1
suse enterprise desktop 15 SP2
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP5
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP6
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP7
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP2
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP5
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP6
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP7
2.2.7-3.20.1
fixed
suse enterprise server 15 SP2
2.2.7-3.20.1
fixed
suse enterprise server 15 SP3
2.2.7-3.20.1
fixed
suse enterprise server 15 SP4
2.2.7-3.20.1
fixed
suse enterprise server 15 SP5
2.2.7-3.20.1
fixed
suse enterprise server 15 SP6
2.2.7-3.20.1
fixed
suse enterprise server 15 SP7
2.2.7-3.20.1
fixed
libcupsimage2
suse enterprise desktop 15 SP2
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP5
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP6
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP7
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP2
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP5
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP6
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP7
2.2.7-3.20.1
fixed
suse enterprise server 15 SP2
2.2.7-3.20.1
fixed
suse enterprise server 15 SP3
2.2.7-3.20.1
fixed
suse enterprise server 15 SP4
2.2.7-3.20.1
fixed
suse enterprise server 15 SP5
2.2.7-3.20.1
fixed
suse enterprise server 15 SP6
2.2.7-3.20.1
fixed
suse enterprise server 15 SP7
2.2.7-3.20.1
fixed
libcupsmime1
suse enterprise desktop 15 SP2
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP5
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP6
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP7
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP2
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP5
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP6
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP7
2.2.7-3.20.1
fixed
suse enterprise server 15 SP2
2.2.7-3.20.1
fixed
suse enterprise server 15 SP3
2.2.7-3.20.1
fixed
suse enterprise server 15 SP4
2.2.7-3.20.1
fixed
suse enterprise server 15 SP5
2.2.7-3.20.1
fixed
suse enterprise server 15 SP6
2.2.7-3.20.1
fixed
suse enterprise server 15 SP7
2.2.7-3.20.1
fixed
libcupsppdc1
suse enterprise desktop 15 SP2
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP5
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP6
2.2.7-3.20.1
fixed
suse enterprise desktop 15 SP7
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP2
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP5
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP6
2.2.7-3.20.1
fixed
suse enterprise sap 15 SP7
2.2.7-3.20.1
fixed
suse enterprise server 15 SP2
2.2.7-3.20.1
fixed
suse enterprise server 15 SP3
2.2.7-3.20.1
fixed
suse enterprise server 15 SP4
2.2.7-3.20.1
fixed
suse enterprise server 15 SP5
2.2.7-3.20.1
fixed
suse enterprise server 15 SP6
2.2.7-3.20.1
fixed
suse enterprise server 15 SP7
2.2.7-3.20.1
fixed
Common Weakness Enumeration
References
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
https://support.apple.com/en-us/HT210788
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
https://support.apple.com/en-us/HT210788