Medium severity5.3NVD Advisory· Published Mar 26, 2018· Updated Jun 17, 2026
CVE-2017-18248
CVE-2017-18248
Description
The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- Range: <2.2.6
- Range: <2.2.6
- osv-coords5 versionspkg:rpm/opensuse/cups&distro=openSUSE%20Tumbleweedpkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3
< 2.3.3op2-4.2+ 4 more
- (no CPE)range: < 2.3.3op2-4.2
- (no CPE)range: < 1.7.5-20.14.1
- (no CPE)range: < 1.7.5-20.14.1
- (no CPE)range: < 1.7.5-20.14.1
- (no CPE)range: < 1.7.5-20.14.1
Patches
Vulnerability mechanics
References
7- github.com/apple/cups/commit/49fa4983f25b64ec29d548ffa3b9782426007df3nvdPatchThird Party Advisory
- github.com/apple/cups/issues/5143nvdExploitThird Party Advisory
- security.cucumberlinux.com/security/details.phpnvdExploitThird Party Advisory
- github.com/apple/cups/releases/tag/v2.2.6nvdThird Party Advisory
- lists.debian.org/debian-lts-announce/2018/05/msg00018.htmlnvd
- lists.debian.org/debian-lts-announce/2018/07/msg00003.htmlnvd
- usn.ubuntu.com/3713-1/nvd
News mentions
0No linked articles in our index yet.