Printer Zeroconfig CRLF Vulnerability in CUPS

CVE-2017-15400 · HIGH Severity

AV:N/AC:M/AU:N/C:C/I:C/A:C

Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file, aka a printer zeroconfig CRLF issue.

Learn more about our Cis Benchmark Audit For Google Chrome.