cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpreted as granting browse access to all IP addresses.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "1.0.52-0ubuntu1.1",
"binary_name": "cups-browsed"
},
{
"binary_version": "1.0.52-0ubuntu1.1",
"binary_name": "cups-filters"
},
{
"binary_version": "1.0.52-0ubuntu1.1",
"binary_name": "cups-filters-core-drivers"
},
{
"binary_version": "1.0.52-0ubuntu1.1",
"binary_name": "libcupsfilters-dev"
},
{
"binary_version": "1.0.52-0ubuntu1.1",
"binary_name": "libcupsfilters1"
},
{
"binary_version": "1.0.52-0ubuntu1.1",
"binary_name": "libfontembed-dev"
},
{
"binary_version": "1.0.52-0ubuntu1.1",
"binary_name": "libfontembed1"
}
]
}