cups-browsedÔ¶³ÌºÅÁîÖ´Ðзì϶À´Ï®£¬£¬£¬OG¶«·½ÌüÌṩ½â¾ö¹æ»®

°ä²¼¹¦·ò 2024-09-29

½üÆÚ£¬£¬£¬OG¶«·½Ìü¼à¿Øµ½cups-browsedÔ¶³ÌºÅÁîÖ´Ðзì϶£¨CVE-2024-47176£©£¬£¬£¬¸Ã·ì϶CVSS3.1ĿǰÆÀ·ÖΪ8.3·Ö£¬£¬£¬×ÛºÏÆÀ¼¶Îª¡°¸ßΣ¡±¡£


CUPS£¨Common UNIX Printing System£©ÊÇ Linux ϵͳÉÏʹÓÃ×î¿í·ºµÄ´òӡϵͳ£¬£¬£¬Æä×é¼þcups-browsedÔ̺¬ÍøÂç´òÓ¡Ö°ÄÜ£¬£¬£¬Ô̺¬µ«²»ÏÞÓÚ×Ô¶¯·¢ÏÖ´òÓ¡·þÎñºÍ¹²Ïí´òÓ¡»ú£¬£¬£¬ÊÜÓ°Ïì°æ±¾ÖÐδ¶ÔÊý¾Ý°ü½øÐÐÑéÖ¤£¬£¬£¬¹¥»÷Õß¿ÉÀûÓÃFoomaticRIPCommandLineʵÏÖÔ¶³ÌºÅÁîÖ´ÐС£


ͼƬ1.png



·ì϶¸´ÏÖ½ØÍ¼


ͼƬ2.jpg


Ó°Ïì°æ±¾


cups-browsed <= 2.0.1


¼ì²â²½Öè


²é¿´cups-browsedÔËÐÐ״̬£¬£¬£¬Ö´ÐкÅÁîΪsystemctl status cups-browsed£¬£¬£¬ÈôÊÇÏÔʾ¡°active (running)¡±ÔòÊÜÓ°Ïì¡£


½â¾ö¹æ»®


Ò»¡¢¡¢¡¢¹Ù·½ÐÞ¸´¹æ»®

ÔÝÎÞ¹Ù·½ÐÞ¸´¹æ»®¡£


¶þ¡¢¡¢¡¢Ò»Ê±¶ã±Ü¹æ»®


ÖÕ³¡²¢½ûÓÃcups-browsed£¬£¬£¬Ö´ÐкÅÁîΪsudo systemctl stop cups-browsed && sudo systemctl disable cups-browsed¡£


Èý¡¢¡¢¡¢OG¶«·½Ìü½â¾ö¹æ»®


1¡¢¡¢¡¢OG¶«·½ÌüÖն˲úÆ·¹æ»®


Ìì«‘Öն˰²È«Ò»Ì廯£¨EDR£©Ìṩ·ì϶µÄרÏîÑéÖ¤²é³­ÄÜÁ¦¿É¶Ô·ì϶פÁôÖն˽øÐÐÈ«ÍøÍ¬²½ÑéÖ¤£¬£¬£¬¼à¿ØÖ÷»úÒì³£ÍâÁ¬¼ì²â£¬£¬£¬Ô¤·À·ì϶¹¥»÷·çÏÕ¡£


ͼƬ3.jpg


2¡¢¡¢¡¢OG¶«·½Ìü¼ì²âÀà²úÆ·¹æ»®


ÌìãÙÈëÇÖ¼ì²âÓëÖÎÀíϵͳ£¨IDS£©¡¢¡¢¡¢ÌìãÙ³¬Èںϼì²â̽Õ루CSP£©¡¢¡¢¡¢ÌìãÙÍþв·ÖÎöÒ»Ìå»ú£¨TAR£©¡¢¡¢¡¢ÌìÇåÈëÇÖ·ÀÓùϵͳ£¨IPS£©£¬£¬£¬Éý¼¶µ½×îа汾¼´¿ÉÓÐЧ¼ì²â»ò·À»¤¸Ã·ì϶Ôì³ÉµÄ¹¥»÷·çÏÕ¡£

ÊÂÎñ¿âÏÂÔØµØÖ·£º£º £º

https://venustech.download.venuscloud.cn/


3¡¢¡¢¡¢OG¶«·½Ìü©ɨ²úÆ·¹æ»®


£¨1£©¡°OG¶«·½Ìü·ì϶ɨÃèϵͳV6.0¡±²úÆ·ÒÑÖ§³Ö¶Ô¸Ã·ì϶½øÐÐɨÃè¡£


ͼƬ4.jpg


£¨2£©OG¶«·½Ìü·ì϶ɨÃèϵͳ608XϵÁа汾ÒÑÖ§³Ö¶Ô¸Ã·ì϶½øÐÐɨÃè¡£


ͼƬ5.jpg


4¡¢¡¢¡¢OG¶«·½Ìü×ʲúÓë´àÈõÐÔÖÎÀíÆ½Ì¨²úÆ·¹æ»®


OG¶«·½Ìü×ʲúÓë´àÈõÐÔÖÎÀíÆ½Ì¨ÊµÊ±²É¼¯²¢¸üеý±¨ÐÅÏ¢£¬£¬£¬¶ÔÈë¿â×ʲú·ì϶cups-browsedÔ¶³ÌºÅÁîÖ´Ðзì϶£¨CVE-2024-47176£©½øÐÐÖÎÀí¡£


ͼƬ6.jpg


5¡¢¡¢¡¢OG¶«·½Ìü°²È«ÖÎÀíºÍÌ¬ÊÆ¸Ð֪ƽ̨²úÆ·¹æ»®


Óû§Äܹ»Í¨¹ýÌ©ºÏ°²È«ÖÎÀíºÍÌ¬ÊÆ¸Ð֪ƽ̨£¬£¬£¬½øÐйØÁªÕ½ÊõÅäÖ㬣¬£¬½áºÏÏÖʵ»·¾³ÖÐϵͳÈÕÖ¾ºÍ°²È«É豸µÄ¸æ¾¯ÐÅÏ¢½øÐгÖÐø¼à¿Ø£¬£¬£¬´Ó¶ø·¢ÏÖ¡°cups-browsedÔ¶³ÌºÅÁîÖ´Ðзì϶£¨CVE-2024-47176£©¡±µÄ·ì϶ÀûÓù¥»÷ÐÐΪ¡£


£¨1£©ÔÚÌ©ºÏµÄƽ̨ÖУ¬£¬£¬Í¨¹ý´àÈõÐÔ·¢ÏÖÖ°ÄÜÕë¶Ô¡°cups-browsedÔ¶³ÌºÅÁîÖ´Ðзì϶£¨CVE-2024-47176£©¡±·ì϶ɨÃ蹤×÷£¬£¬£¬ÅŲéÖÎÀíÍøÂçÖÐÊÜ´Ë·ì϶ӰÏìµÄÖØÒª×ʲú£»£»


ͼƬ7.jpg


£¨2£©Æ½Ì¨¡°¹ØÁª·ÖÎö¡±Ä£¿£¿£¿éÖУ¬£¬£¬Ôö³¤¡°L2_cups-browsedÔ¶³ÌºÅÁîÖ´Ðзì϶¡±£¬£¬£¬Í¨¹ýOG¶«·½Ìü¼ì²âÉ豸¡¢¡¢¡¢Ö¸±êÖ÷»úϵͳµÈÉ豸µÄ¸æ¾¯ÈÕÖ¾£¬£¬£¬·¢ÏÖÍⲿ¹¥»÷ÐÐΪ£¬£¬£¬¾ßÌåÅäÖÃÈçÏ£º£º £º


ͼƬ8.jpg


ͨ¹ý¶ÈÎö¹æ¶¨×Ô¶¯½«¡°L2_cups-browsedÔ¶³ÌºÅÁîÖ´Ðзì϶¡±·ì϶ÀûÓõĿÉÒÉÐÐΪԴµØÖ·Ôö³¤µ½¹Û²ìÁÐ±í¡°¸ß·çÏÕÏνӡ±ÖУ¬£¬£¬×÷ΪÄÚ²¿µý±¨Êý¾ÝʹÓ㻣»


£¨3£©Ôö³¤¡°L3_cups-browsedÔ¶³ÌºÅÁîÖ´Ðзì϶¡±£¬£¬£¬Ç°ÌáÈÕÖ¾Ãû³ÆµÈÓÚ»òÔ̺¬¡°L2_cups-browsedÔ¶³ÌºÅÁîÖ´Ðзì϶¡±£¬£¬£¬¹¥»÷Á˾ֵÈÓÚ¡°¹¥»÷³É¹¦¡±£¬£¬£¬Ö÷ÕŵØÖ·ÒýÓÃ×ʲú·ì϶»òÔ´µØÖ·Æ¥ÅäÍþвµý±¨£¬£¬£¬´Ó¶øÌáÉý¹ØÁª¹æ¶¨µÄÏàÐŶÈ¡£


ͼƬ9.jpg