The processbrowsedata function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted packet data.
{
"binaries": [
{
"binary_name": "cups-browsed",
"binary_version": "1.0.52-0ubuntu1.1"
},
{
"binary_name": "cups-filters",
"binary_version": "1.0.52-0ubuntu1.1"
},
{
"binary_name": "cups-filters-core-drivers",
"binary_version": "1.0.52-0ubuntu1.1"
},
{
"binary_name": "libcupsfilters-dev",
"binary_version": "1.0.52-0ubuntu1.1"
},
{
"binary_name": "libcupsfilters1",
"binary_version": "1.0.52-0ubuntu1.1"
},
{
"binary_name": "libfontembed-dev",
"binary_version": "1.0.52-0ubuntu1.1"
},
{
"binary_name": "libfontembed1",
"binary_version": "1.0.52-0ubuntu1.1"
}
],
"availability": "No subscription required"
}