Replying to Avatar Bill Cypher

TLDR, CUPS + bonjour was auto adding any printer advertised to it over mdns and not validating data coming from the printer. Spoof a printer advertisement and send malicious code. Tada, remote code execution as root.
Avatar
JackTheMimic 1y ago

Linux was adding something automactically without User input? I understand discovery, but non-validated or approved data? Sheeeeesh.

Reply to this note

Please Login to reply.

Discussion

No replies yet.