漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer
Vulnerability Description
CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Vulnerability Type
输入验证不恰当
Vulnerability Title
cups 输入验证错误漏洞
Vulnerability Description
cups是cups开源的一个类 Unix 操作系统的组合式印刷系统。 cups存在输入验证错误漏洞，该漏洞源于libppd的函数ppdCreatePPDFromIPP2在创建 PPD 缓冲区时不会清理 IPP 属性。
CVSS Information
N/A
Vulnerability Type
N/A