Compliance Impact

This vulnerability allows a remote IPP client to perform path traversal and write arbitrary RSS XML bytes outside the intended CacheDir/rss directory, potentially replacing root-managed state files. This can lead to denial of service by causing the scheduler to fail parsing the job cache and losing previously queued jobs.

While the CVE description does not explicitly mention compliance with standards such as GDPR or HIPAA, the ability to manipulate job cache files and disrupt printing services could impact the integrity and availability of printing logs or job data, which may be relevant to regulatory requirements for data integrity and availability.

However, there is no direct information provided about how this vulnerability specifically affects compliance with these regulations.

Useful 0 Not Useful 0

Executive Summary

This vulnerability exists in OpenPrinting CUPS versions 2.4.16 and earlier. It involves the RSS notifier component, which allows a path traversal attack through the notify-recipient-uri parameter. A remote IPP client can exploit this to write RSS XML data outside the intended CacheDir/rss directory, anywhere writable by the lp user. Because CacheDir is group-writable by default, the attacker can replace important root-managed state files by creating temporary files and renaming them. This can corrupt the job cache, causing the print scheduler to fail parsing and resulting in the loss of previously queued print jobs.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to denial of service in the printing system by corrupting the job cache. Specifically, an attacker can cause the print scheduler to fail to parse the job cache, which results in the disappearance of previously queued print jobs. This disrupts normal printing operations and may require administrative intervention to restore functionality.

Useful 0 Not Useful 0