CVE-2018-4181 — Incorrect Privilege Assignment in Cups

CWE-266 — Incorrect Privilege Assignment10 documents8 sources
Severity
5.5MEDIUMNVD
OSV5.3
EPSS
0.1%
top 72.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Apple CupsApple MAC OS XDebian Cups+3 more
Timeline
PublishedJan 11
Latest updateMay 13

Description

In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages5 packages

▶debiandebian/cups< cups 2.2.8-2 (bookworm)
▶NVDapple/mac_os_x< 10.13.5
▶Debianapple/cups< 2.2.8-2+3
▶Ubuntuapple/cups< 1.7.2-0ubuntu1.10+2

Also affects: Debian Linux 8.0, 9.0, Ubuntu Linux 14.04, 16.04, 17.10, 18.04

🔴Vulnerability Details

3
GHSA
GHSA-4pfp-mmjh-x8v9: In macOS High Sierra before 10↗2022-05-13
▶
OSV
CVE-2018-4181: In macOS High Sierra before 10↗2019-01-11
▶
OSV
cups vulnerabilities↗2018-07-11
▶

📋Vendor Advisories

4
Ubuntu
CUPS vulnerabilities↗2018-07-11
▶
Apple
CVE-2018-4181: macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan↗2018-06-01
▶
Red Hat
cups: Manipulation of cupsd.conf by a local attacker resulting in limited reads of arbitrary files as root↗2018-05-09
▶
Debian
CVE-2018-4181: cups - In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was ad...↗2018
▶

💬Community

2
Bugzilla
CVE-2018-4180 CVE-2018-4181 CVE-2018-4182 CVE-2018-4183 cups: various flaws [fedora-all]↗2018-07-23
▶
Bugzilla
CVE-2018-4181 cups: Manipulation of cupsd.conf by a local attacker resulting in limited reads of arbitrary files as root↗2018-07-23
▶