Embed Notice

also, as amendment, the gold standard for exploit PoC is to open calc on the user.

The exploit video on the disclosure shows that the extend of it is being able to write a file in /tmp while being the LP/LPD user, with a 700 umask. It's not exactly frightening, other than the threat of a DoS. LP user doesn't have that many permissions on the system.

It IS a code execution with a relatively low effort barrier, but it's still not getting anywhere without running CUPS as root.