Approved changes feed: RSS · Atom

cpe:2.3:a:opensuse:yast2-printer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpensuse (3380e48e-e718-5685-8ad0-092ef58910e5)
ProductYast2 Printer (798a0193-0394-5ef8-97c3-be459ec2e7b5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/yast/yast-printer purl2cpe 2026-06-01 10:15:36.379675
pkg:rpm/opensuse/yast2-printer purl2cpe 2026-06-01 10:15:36.379679

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-20106 vulnerable 2026-06-03 14:38:38.608416 SMB printer settings don't escape characters in passwords properly
MEDIUM (6.5)
In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast.
Published: 2019-03-15T20:00:00.000Z
Updated: 2024-09-16T17:23:19.129Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.