In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-111210196

An update of the cups package has been released.

According to the version of the cups package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - In array_find of array.c, there is a possible     out-of-bounds read due to an incorrect bounds check.
    This could lead to local information disclosure in the     printer spooler with no additional execution privileges     needed. User interaction is not needed for     exploitation.Product: AndroidVersions: Android-8.0     Android-8.1 Android-9 Android-10Android ID:
    A-111210196(CVE-2019-2228)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cups package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - In array_find of array.c, there is a possible     out-of-bounds read due to an incorrect bounds check.
    This could lead to local information disclosure in the     printer spooler with no additional execution privileges     needed. User interaction is not needed for     exploitation.Product: AndroidVersions: Android-8.0     Android-8.1 Android-9 Android-10Android ID:
    A-111210196.(CVE-2019-2228)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4340-1 advisory.

    It was discovered that CUPS incorrectly handled certain language values. A local attacker could possibly     use this issue to cause CUPS to crash, leading to a denial of service, or possibly obtain sensitive     information. This issue only applied to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 19.10.
    (CVE-2019-2228)

    Stephan Zeisberg discovered that CUPS incorrectly handled certain malformed ppd files. A local attacker     could possibly use this issue to execute arbitrary code. (CVE-2020-3898)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In array_find of array.c, there is a possible     out-of-bounds read due to an incorrect bounds check.
    This could lead to local information disclosure in the     printer spooler with no additional execution privileges     needed. User interaction is not needed for     exploitation.Product: AndroidVersions: Android-8.0     Android-8.1 Android-9 Android-10Android ID:
    A-111210196(CVE-2019-2228)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An issue has been found in cups, the Common UNIX Printing System(tm).

An incorrect bounds check could lead to a possible out-of-bounds read and local information disclosure in the printer spooler.

For Debian 8 'Jessie', this problem has been fixed in version 1.7.5-11+deb8u7.

We recommend that you upgrade your cups packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
203336	Photon OS 4.0: Cups PHSA-2023-4.0-0364	Nessus	PhotonOS Local Security Checks	Local	medium
147542	EulerOS Virtualization for ARM 64 3.0.2.0 : cups (EulerOS-SA-2021-1379)	Nessus	Huawei Local Security Checks	Local	medium
137811	EulerOS Virtualization for ARM 64 3.0.6.0 : cups (EulerOS-SA-2020-1704)	Nessus	Huawei Local Security Checks	Local	medium
136029	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : CUPS vulnerabilities (USN-4340-1)	Nessus	Ubuntu Local Security Checks	Local	high
135734	EulerOS 2.0 SP8 : cups (EulerOS-SA-2020-1501)	Nessus	Huawei Local Security Checks	Local	medium
132346	Debian DLA-2047-1 : cups security update	Nessus	Debian Local Security Checks	Local	medium

Detections

Analytics

CVE-2019-2228

medium

Tenable Plugins

medium

medium

medium

high

medium

medium