Local Privilege Escalation Vulnerability in CUPS 2.4.16

• •CUPS version 2.4.16 is vulnerable to local privilege escalation.
• •Exploitation involves capturing a Local authentication token via IPP requests.
• •CUPS 2.4.17 and later versions have been patched.

A local privilege escalation vulnerability has been identified in CUPS version 2.4.16, allowing unprivileged users to gain root access. The exploit involves capturing a Local authentication token through a crafted IPP request to a rogue CUPS server. This vulnerability affects systems running CUPS 2.4.16 and earlier, with a proof-of-concept (PoC) available for exploitation. The attack method leverages a bypass of the FileDevice policy, enabling arbitrary file writes as root. Users are advised against running the PoC on production systems due to its potential for misuse. CUPS versions 2.4.17 and later have been patched to address this vulnerability. The exploit is race-dependent, meaning success is not guaranteed on every attempt. The vulnerability has been reported by multiple sources, indicating a broader awareness within the cybersecurity community.