medium6.7
CVE-2022-26691
A logic issue was addressed with improved state management.
Impact
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Cups | before 499.4 |
| Apple | Mac Os X | from 10.15 before 10.15.7 Version 10.15.7 |
| Apple | Macos | from 11.0 before 11.6.5 after 12.0.0 before 12.3 |
| Debian | Debian Linux | Versions 9.0, 10.0, 11.0 |
| Fedoraproject | Fedora | Versions 35, 36 |
| Openprinting | Cups | before 2.4.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/OpenPrinting/cups/commit/de4f8c196106033e4c372dce3e91b9d42b0b9444
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0026/MNDT-2022-0026.md
- https://lists.debian.org/debian-lts-announce/2022/05/msg00039.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQ6TD7F3VRITPEHFDHZHK7MU6FEBMZ5U/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQRIT4H75XV6M42K7ZTARWZ7YLLYQHPO/
- https://support.apple.com/en-us/HT213183
- https://support.apple.com/en-us/HT213184
- https://support.apple.com/en-us/HT213185
- https://www.debian.org/security/2022/dsa-5149
- https://github.com/OpenPrinting/cups/commit/de4f8c196106033e4c372dce3e91b9d42b0b9444
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0026/MNDT-2022-0026.md
- https://lists.debian.org/debian-lts-announce/2022/05/msg00039.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQ6TD7F3VRITPEHFDHZHK7MU6FEBMZ5U/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQRIT4H75XV6M42K7ZTARWZ7YLLYQHPO/
- https://support.apple.com/en-us/HT213183
- https://support.apple.com/en-us/HT213184
- https://support.apple.com/en-us/HT213185
- https://www.debian.org/security/2022/dsa-5149