Simone Margaritelli discovered that libppd incorrectly sanitized IPP data when creating PPD files. A remote attacker could possibly use this issue to manipulate PPD files and execute arbitrary code when a printer is used.
{ "availability": "No subscription required", "binaries": [ { "binary_version": "2:2.0.0-0ubuntu4.1", "binary_name": "libppd-dev" }, { "binary_version": "2:2.0.0-0ubuntu4.1", "binary_name": "libppd-tests" }, { "binary_version": "2:2.0.0-0ubuntu4.1", "binary_name": "libppd-tests-dbgsym" }, { "binary_version": "2:2.0.0-0ubuntu4.1", "binary_name": "libppd-utils" }, { "binary_version": "2:2.0.0-0ubuntu4.1", "binary_name": "libppd-utils-dbgsym" }, { "binary_version": "2:2.0.0-0ubuntu4.1", "binary_name": "libppd2" }, { "binary_version": "2:2.0.0-0ubuntu4.1", "binary_name": "libppd2-common" }, { "binary_version": "2:2.0.0-0ubuntu4.1", "binary_name": "libppd2-dbgsym" }, { "binary_version": "2:2.0.0-0ubuntu4.1", "binary_name": "ppdc" } ] }