VULNERABILITY INTELLIGENCE

CVE-2014-4336

CVSS score5.8 MEDIUM
EPSS probability1.06%
CISA KEVNot currently listed
Published2014-06-22
Last modified2026-06-17
CVSS vectorAV:A/AC:L/Au:N/C:P/I:P/A:P

Description

The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the host name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707.

Weakness classification

  • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

Primary references