NVD Vulnerability Detail

CVE-2017-18190

Summary	A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS server (neither the OS nor the web browser is responsible for ensuring that localhost.localdomain is 127.0.0.1).
Publication Date	Feb. 17, 2018, 2:29 a.m.
Registration Date	Jan. 26, 2021, 1:20 p.m.
Last Update	Nov. 21, 2024, 12:19 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:apple:cups::::::::					2.2.2

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::

Related information, measures and tools

No	URL	タグ
1	https://bugs.chromium.org/p/project-zero/issues/detail?id=1048	Exploit Issue Tracking Third Party Advisory
2	https://bugs.chromium.org/p/project-zero/issues/detail?id=1048	Exploit Issue Tracking Third Party Advisory
3	https://github.com/apple/cups/commit/afa80cb2b457bf8d64f775bed307588610476c41	Patch Third Party Advisory
4	https://github.com/apple/cups/commit/afa80cb2b457bf8d64f775bed307588610476c41	Patch Third Party Advisory
5	https://lists.debian.org/debian-lts-announce/2018/02/msg00023.html	Mailing List Third Party Advisory
6	https://lists.debian.org/debian-lts-announce/2018/02/msg00023.html	Mailing List Third Party Advisory
7	https://lists.debian.org/debian-lts-announce/2018/07/msg00003.html	Mailing List Third Party Advisory
8	https://lists.debian.org/debian-lts-announce/2018/07/msg00003.html	Mailing List Third Party Advisory
9	https://usn.ubuntu.com/3577-1/	Third Party Advisory
10	https://usn.ubuntu.com/3577-1/	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-290	スプーフィングによる認証回避	https://cwe.mitre.org/data/definitions/290.html

JVN Vulnerability Information

CUPS におけるセキュリティ機能に関する脆弱性

Title	CUPS におけるセキュリティ機能に関する脆弱性
Summary	CUPS には、セキュリティ機能に関する脆弱性が存在します。
Possible impacts	情報を改ざんされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 4, 2017, midnight
Registration Date	April 4, 2018, 5:18 p.m.
Last Update	April 4, 2018, 5:18 p.m.

Affected System

アップル

CUPS 2.2.2 未満

Debian

Debian GNU/Linux 7.0

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-18190	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18190
National Vulnerability Database (NVD)
2	CVE-2017-18190	https://nvd.nist.gov/vuln/detail/CVE-2017-18190

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-254	https://cwe.mitre.org/data/definitions/254.html

ベンダー情報

No	Name	URL
Debian
1	[SECURITY] [DLA 1288-1] cups security update	https://lists.debian.org/debian-lts-announce/2018/02/msg00023.html
GitHub
2	Don't treat "localhost.localdomain" as an allowed replacement for localhost, since it isn't.	https://github.com/apple/cups/commit/afa80cb2b457bf8d64f775bed307588610476c41

Change Log

No	Changed Details	Date of change
1	[2018年04月04日] 掲載	April 4, 2018, 5:18 p.m.