A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.
| Vendor | Product | Versions |
|---|---|---|
| red hat | openshift_container_platform | — |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| canonical | ubuntu linux | cert_advisory | 90% |
| debian | debian linux | cert_advisory | 90% |
| open source | samba | cert_advisory | 90% |
| red hat | enterprise_linux | cve_cpe | 95% |
| samba | samba | cve_cpe | 95% |
Updated description with critical vulnerability details, changed vendor and product to 'samba', updated severity to CRITICAL, and noted that there is no exploit available.
Initial creation
