high8.8
CVE-2018-6553
The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links.
Impact
The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cups | Cups | All versions |
| Canonical | Ubuntu Linux | Versions 14.04, 16.04, 17.10, 18.04 |
| Debian | Debian Linux | Versions 8.0, 9.0 |
References
- NVD record
- CVE.org record
- https://lists.debian.org/debian-lts-announce/2018/07/msg00014.html
- https://security.gentoo.org/glsa/201908-08
- https://usn.ubuntu.com/usn/usn-3713-1
- https://www.debian.org/security/2018/dsa-4243
- https://lists.debian.org/debian-lts-announce/2018/07/msg00014.html
- https://security.gentoo.org/glsa/201908-08
- https://usn.ubuntu.com/usn/usn-3713-1
- https://www.debian.org/security/2018/dsa-4243