CVE-2019-8675
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
8.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code.
- Record
CVE-2019-8675- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code.
- Record
CVE-2019-8675- Updated
- 2026-11-02
EUVDEUVD-2019-18065 No score
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code.
- Record
EUVD-2019-18065- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xrvr-m2pw-2qj4 No score
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code.
- Record
GHSA-xrvr-m2pw-2qj4- Weakness
- CWE-120
- Updated
- 2026-11-02
OSVALPINE-CVE-2019-8675
8.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code.
- Record
ALPINE-CVE-2019-8675- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2019-8675
8.8
CVE-2019-8675 does not affect BellSoft software
- Record
BELL-CVE-2019-8675- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 12 moreShow less
OSV
8.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code.
- Record
CVE-2019-8675- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-8675
8.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code.
- Record
DEBIAN-CVE-2019-8675- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:1765
3.5
Red Hat Security Advisory: cups security and bug fix update
- Record
RHSA-2020:1765- CVSS 3.0
- 3.5 Low
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVRHSA-2020:3864
5.8
Red Hat Security Advisory: cups security and bug fix update
- Record
RHSA-2020:3864- CVSS 3.0
- 5.8 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-8675
8.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code.
- Record
UBUNTU-CVE-2019-8675- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2020-0248 No score
Updated cups packages fix security vulnerability
Updated cups packages fix security vulnerabilities:
It was discovered that CUPS incorrectly handled certain language values. A local attacker could possibly use this issue to cause CUPS to crash, leading to a denial of service, or possibly obtain sensitive information (CVE-2019-2228).
Stephan Zeisberg discovered that the CUPS SNMP backend incorrectly handled encoded ASN.1 inputs. A remote attacker could possibly use this issue to cause CUPS to crash by providing specially crafted network traffic (CVE-2019-8675, CVE-2019-8696).
The ippReadIO function may under-read an extension (CVE-2019-8842).
Stephan Zeisberg discovered that CUPS incorrectly handled certain malformed ppd files. A local attacker could possibly use this issue to execute arbitrary code (CVE-2020-3898).
The cups package has been updated to version 2.2.13 and patched to fix these issues and other bugs.
Also, this update will hopefully fix the cups service failing to start at boot on some systems.
- Record
MGASA-2020-0248- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2573-1 No score
Security update for cups
This update for cups fixes the following issues:
- CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1_get_type function(bsc#1146358).
- CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1_get_packed function (bsc#1146359).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2573-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2575-1 No score
Security update for cups
This update for cups fixes the following issues:
- CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1_get_type function(bsc#1146358).
- CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1_get_packed function (bsc#1146359).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2575-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:14229-1 No score
Security update for cups
This update for cups fixes the following issues:
- CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1_get_type function(bsc#1146358).
- CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1_get_packed function (bsc#1146359).
- Fixed a double free which was triggered by Java application (bsc#959478).
- Record
SUSE-SU-2019:14229-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:3030-1 No score
Security update for cups
This update for cups fixes the following issues:
- CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1_get_type function(bsc#1146358).
- CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1_get_packed function (bsc#1146359).
- Record
SUSE-SU-2019:3030-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:3057-1 No score
Security update for cups
This update for cups fixes the following issues:
- CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1_get_type function(bsc#1146358).
- CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1_get_packed function (bsc#1146359).
- Record
SUSE-SU-2019:3057-1- Updated
- 2026-11-02
OSVUSN-4105-1 No score
cups vulnerabilities
Stephan Zeisberg discovered that the CUPS SNMP backend incorrectly handled encoded ASN.1 inputs. A remote attacker could possibly use this issue to cause CUPS to crash by providing specially crafted network traffic. (CVE-2019-8696, CVE-2019-8675)
It was discovered that CUPS did not properly handle client disconnection events. A local attacker could possibly use this issue to cause a denial of service or disclose memory from the CUPS server.
- Record
USN-4105-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsAlpine:v3.10 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.11 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.12 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.13 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.14 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.15 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.16 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.17 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.18 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.19 |
before 2.2.12-r0 | 2.2.12-r0 |
Show 98 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cupsAlpine:v3.20 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.21 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.22 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.23 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.24 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.7 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.8 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsAlpine:v3.9 |
before 2.2.12-r0 | 2.2.12-r0 |
cupsDebian:12 |
before 2.2.12-1 | 2.2.12-1 |
cupsDebian:13 |
before 2.2.12-1 | 2.2.12-1 |
cupsDebian:14 |
before 2.2.12-1 | 2.2.12-1 |
cupsDebian:8 From an advisory covering 3 CVEs |
before 1.7.5-11+deb8u5, plus listed versions 1.7.5-111.7.5-11+deb8u11.7.5-11+deb8u21.7.5-11+deb8u31.7.5-11+deb8u4 |
1.7.5-11+deb8u5 |
cupsMageia:7 From an advisory covering 5 CVEs |
before 2.2.13-1.2.mga7 | 2.2.13-1.2.mga7 |
cupsRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-clientRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-client-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-develRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-filesystemRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-ipptoolRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-ipptool-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-libs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-lpdRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-lpd-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cupsRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-client-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-debugsourceRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-ipptool-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-libsRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-libs-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cups-lpd-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-33.el8 | 1:2.2.6-33.el8 |
cupsRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-clientRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-filesystemRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-libsRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-lpdRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-develRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-ipptoolRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cupsRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-clientRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-filesystemRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-lpdRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-develRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-ipptoolRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cupsRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-clientRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-develRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-filesystemRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-libsRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-lpdRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-ipptoolRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cupsRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-clientRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-develRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-filesystemRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-lpdRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cups-ipptoolRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 1:1.6.3-51.el7 | 1:1.6.3-51.el7 |
cupsSUSE:Linux Enterprise Point of Sale 11 SP3 From an advisory covering 2 CVEs |
before 1.3.9-8.46.56.8.1 | 1.3.9-8.46.56.8.1 |
cupsSUSE:Linux Enterprise Server 11 SP4-LTSS From an advisory covering 2 CVEs |
before 1.3.9-8.46.56.8.1 | 1.3.9-8.46.56.8.1 |
cupsSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 2 CVEs |
before 2.2.7-3.14.1 | 2.2.7-3.14.1 |
cupsSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 2 CVEs |
before 2.2.7-3.14.1 | 2.2.7-3.14.1 |
cupsSUSE:Linux Enterprise Module for Desktop Applications 15 From an advisory covering 2 CVEs |
before 2.2.7-3.14.1 | 2.2.7-3.14.1 |
cupsSUSE:Linux Enterprise Module for Development Tools 15 From an advisory covering 2 CVEs |
before 2.2.7-3.14.1 | 2.2.7-3.14.1 |
cupsSUSE:Linux Enterprise Module for Development Tools 15 SP1 From an advisory covering 2 CVEs |
before 2.2.7-3.14.1 | 2.2.7-3.14.1 |
cupsSUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:OpenStack Cloud 7 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Server 12 SP1-LTSS From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsSUSE:Enterprise Storage 5 From an advisory covering 2 CVEs |
before 1.7.5-20.26.1 | 1.7.5-20.26.1 |
cupsUbuntu:16.04:LTS |
before 2.1.3-4ubuntu0.10, plus listed versions 2.1.0-4ubuntu32.1.0-52.1.0-62.1.0-6ubuntu12.1.0-7 Show 14 moreShow less2.1.2-12.1.2-22.1.3-12.1.3-1build12.1.3-32.1.3-42.1.3-4ubuntu0.22.1.3-4ubuntu0.32.1.3-4ubuntu0.42.1.3-4ubuntu0.52.1.3-4ubuntu0.62.1.3-4ubuntu0.72.1.3-4ubuntu0.82.1.3-4ubuntu0.9 |
2.1.3-4ubuntu0.10 |
cupsUbuntu:18.04:LTS |
before 2.2.7-1ubuntu2.7, plus listed versions 2.2.4-7ubuntu22.2.5-22.2.6-22.2.6-32.2.6-4 Show 9 moreShow less2.2.6-52.2.7-1ubuntu12.2.7-1ubuntu22.2.7-1ubuntu2.12.2.7-1ubuntu2.22.2.7-1ubuntu2.32.2.7-1ubuntu2.42.2.7-1ubuntu2.52.2.7-1ubuntu2.6 |
2.2.7-1ubuntu2.7 |
cupsUbuntu:16.04:LTS From an advisory covering 2 CVEs |
before 2.1.3-4ubuntu0.10, plus listed versions 2.1.0-4ubuntu32.1.0-52.1.0-62.1.0-6ubuntu12.1.0-7 Show 14 moreShow less2.1.2-12.1.2-22.1.3-12.1.3-1build12.1.3-32.1.3-42.1.3-4ubuntu0.22.1.3-4ubuntu0.32.1.3-4ubuntu0.42.1.3-4ubuntu0.52.1.3-4ubuntu0.62.1.3-4ubuntu0.72.1.3-4ubuntu0.82.1.3-4ubuntu0.9 |
2.1.3-4ubuntu0.10 |
cupsUbuntu:18.04:LTS From an advisory covering 2 CVEs |
before 2.2.7-1ubuntu2.7, plus listed versions 2.2.4-7ubuntu22.2.5-22.2.6-22.2.6-32.2.6-4 Show 9 moreShow less2.2.6-52.2.7-1ubuntu12.2.7-1ubuntu22.2.7-1ubuntu2.12.2.7-1ubuntu2.22.2.7-1ubuntu2.32.2.7-1ubuntu2.42.2.7-1ubuntu2.52.2.7-1ubuntu2.6 |
2.2.7-1ubuntu2.7 |
cupsopenSUSE:Leap 15.0 From an advisory covering 2 CVEs |
before 2.2.7-lp150.2.13.1 | 2.2.7-lp150.2.13.1 |
cupsopenSUSE:Leap 15.1 From an advisory covering 2 CVEs |
before 2.2.7-lp151.6.3.1 | 2.2.7-lp151.6.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-8675 is a high vulnerability (CVSS 8.8) in Apple Macos, published August 14, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.12%, the 81st percentile. Fixed in cups 2.2.12-r0.
References
support.apple.com/en-us/HT210348
nvd.nist.gov/vuln/detail/CVE-2019-8675
github.com/advisories/GHSA-xrvr-m2pw-2qj4
security.alpinelinux.org/vuln/CVE-2019-8675
docs.bell-sw.com/security/cves/CVE-2019-8675
security-tracker.debian.org/tracker/CVE-2019-8675
Show 39 moreShow less
advisories.mageia.org/MGASA-2020-0248.html
bugs.mageia.org/show_bug.cgi?id=26531
usn.ubuntu.com/4105-1
usn.ubuntu.com/4340-1
security-tracker.debian.org/tracker/CVE-2019-8842
github.com/apple/cups/releases/tag/v2.2.12
github.com/apple/cups/releases/tag/v2.2.13
access.redhat.com/errata/RHSA-2020:1765
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=1738455
bugzilla.redhat.com/show_bug.cgi?id=1738497
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1765.json
access.redhat.com/security/cve/CVE-2019-8675
cve.org/CVERecord?id=CVE-2019-8675
access.redhat.com/security/cve/CVE-2019-8696
cve.org/CVERecord?id=CVE-2019-8696
nvd.nist.gov/vuln/detail/CVE-2019-8696
access.redhat.com/errata/RHSA-2020:3864
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=1546395
bugzilla.redhat.com/show_bug.cgi?id=1715907
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3864.json
access.redhat.com/security/cve/CVE-2017-18190
cve.org/CVERecord?id=CVE-2017-18190
nvd.nist.gov/vuln/detail/CVE-2017-18190
suse.com/support/update/announcement/2019/suse-su-201914229-1
bugzilla.suse.com/1146358
bugzilla.suse.com/1146359
bugzilla.suse.com/959478
suse.com/security/cve/CVE-2019-8675
suse.com/security/cve/CVE-2019-8696
suse.com/support/update/announcement/2019/suse-su-20193030-1
suse.com/support/update/announcement/2019/suse-su-20193057-1
ubuntu.com/security/CVE-2019-8675
ubuntu.com/security/notices/USN-4105-1
ubuntu.com/security/CVE-2019-8696
lists.opensuse.org/archives/list/[email protected]/thread/2U7ZFFNECZWE2BZ2HMLFUOQGBZYQKIS5
lists.opensuse.org/archives/list/[email protected]/thread/24BSJBHQAG2FNFAWH2UT55ZV7FBGBDIE