Out-of-bounds read in CUPS - CVE-2019-2228

Vulnerability identifier: #VU23605

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-2228

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the ippSetValuetag function when processing language value. A local user can trigger an out-of-bounds read error and read contents of memory on the system.

CUPS
cups (Ubuntu package)
cups
cups-debuginfo
cups-debugsource
cups-devel
cups-help
cups-libs
openEuler

Install updates from vendor's website.

CUPS - addressed in versions 2.2.13, 2.3.1
cups (Ubuntu package) - addressed in versions 2.1.3-4ubuntu0.11, 2.2.7-1ubuntu2.8, 2.2.12-2ubuntu1.1, 2.3.1-9ubuntu1.1
cups - update to 2.2.13-1
cups-debuginfo - update to 2.2.13-1
cups-debugsource - update to 2.2.13-1
cups-devel - update to 2.2.13-1
cups-help - update to 2.2.13-1
cups-libs - update to 2.2.13-1

• https://github.com/apple/cups/releases/tag/v2.3.1

• Information disclosure in CUPS
• Ubuntu update for CUPS
• openEuler 20.03 LTS update for cups-2.2.13-1