CVE-2019-8675

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.6 Security Update versions prior to 2019-004 for High Sierra and Sierra

Description A buffer overflow issue was addressed with improved memory handling. An attacker in a privileged network position may be able to execute arbitrary code. The issue is related to the asn1 get type function in the libcups library of the CUPS print server, which can cause a stack-based buffer overflow. Exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations For macOS versions prior to 10.14.6, update to macOS Mojave 10.14.6 or later. For High Sierra and Sierra, apply Security Update 2019-004 or later. As a temporary workaround, consider restricting access to the CUPS print server until a patch is available.