cups-filters Backend Error beh.c os command injection

Summaryinfo

A vulnerability marked as critical has been reported in cups-filters. Affected by this vulnerability is an unknown functionality of the file beh.c of the component Backend Error Handler. Performing a manipulation results in os command injection. This vulnerability is reported as CVE-2023-24805. The attack is possible to be carried out remotely. No exploit exists. Applying a patch is the recommended action to fix this issue.

Detailsinfo

A vulnerability was found in cups-filters (Printing Software) (the affected version is unknown). It has been classified as critical. This affects an unknown code of the file beh.c of the component Backend Error Handler. The manipulation with an unknown input leads to a os command injection vulnerability. CWE is classifying the issue as CWE-78. The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. If you use the Backend Error Handler (beh) to create an accessible network printer, this security vulnerability can cause remote code execution. `beh.c` contains the line `retval = system(cmdline) >> 8;` which calls the `system` command with the operand `cmdline`. `cmdline` contains multiple user controlled, unsanitized values. As a result an attacker with network access to the hosted print server can exploit this vulnerability to inject system commands which are executed in the context of the running server. This issue has been addressed in commit `8f2740357` and is expected to be bundled in the next release. Users are advised to upgrade when possible and to restrict access to network printers in the meantime.

The weakness was disclosed 05/18/2023 as GHSA-gpxc-v2m8-fr3x. The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2023-24805 since 01/30/2023. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1202 for this issue.

The vulnerability scanner Nessus provides a plugin with the ID 239835 (TencentOS Server 3: cups-filters (TSSA-2023:0088)), which helps to determine the existence of the flaw in a target environment.

Applying the patch 8f274035756c04efeb77eb654e9d4c4447287d65 is able to eliminate this problem. The bugfix is ready for download at github.com.

The vulnerability is also documented in the vulnerability database at Tenable (239835). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Printing Software

Name

• cups-filters

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion