CVE-2017-15400
Fixed in a distro release EPSS <1%
Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file, aka a printer zeroconfig CRLF issue.
Products: google chrome_os
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 2.2.3-2 |
| Debian 13 | cups | 2.2.3-2 |
| Debian 14 | cups | 2.2.3-2 |
| Debian 9 | cups | 2.2.1-8+deb9u2 |