CVE-2018-4700

Related Files

Red Hat Security Advisory 2020-1050-01

Posted Apr 1, 2020

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2020-1050-01 - The Common UNIX Printing System provides a portable printing layer for Linux, UNIX, and similar operating systems. Issues addressed include a cross site request forgery vulnerability.

tags | advisory, csrf

systems | linux, redhat, unix

advisories | CVE-2018-4180, CVE-2018-4181, CVE-2018-4700

SHA-256 | 364e7852548ee6a6a564bd61970739e18576222c61e8167b077b9fcfd1e3002d

Download | Favorite | View

CUPS Weak Session Cookie Generation

Posted Dec 12, 2018

Authored by Jann Horn, Google Security Research

CUPS generates session cookies srandom(time(NULL)) and random() on Linux.

tags | advisory

systems | linux

advisories | CVE-2018-4700

SHA-256 | 3b69505f07ce22a5883565aef22b4c6989365de343f9d6a0d32ff53d8c0cdb06

Download | Favorite | View

Ubuntu Security Notice USN-3842-1

Posted Dec 11, 2018

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3842-1 - Jann Horn discovered that CUPS incorrectly handled session cookie randomness. A remote attacker could possibly use this issue to perform cross-site request forgery attacks.

tags | advisory, remote, csrf

systems | linux, ubuntu

advisories | CVE-2018-4700

SHA-256 | 830d27a53042e4171fdb06fa615f97b6d6d61e7a9870086efbf089779ff5fda9

Download | Favorite | View