# CVE-2018-6553: cups-ppdc: The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links

CVE-2018-6553 is fixed in 14 products on 1 platform, first by cups 2.2.7-1ubuntu2.1, released July 10, 2018. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-6553
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0039
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jul 10, 2018

## Description

The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | cups Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [cups 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-cups-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |
| Linux | cups-bsd Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [cups-bsd 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-cups-bsd-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |
| Linux | cups-client Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [cups-client 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-cups-client-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |
| Linux | cups-common Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [cups-common 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-cups-common-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |
| Linux | cups-core-drivers Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [cups-core-drivers 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-cups-core-drivers-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |
| Linux | cups-daemon Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [cups-daemon 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-cups-daemon-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |
| Linux | cups-ipp-utils Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [cups-ipp-utils 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-cups-ipp-utils-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |
| Linux | cups-ppdc Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [cups-ppdc 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-cups-ppdc-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |
| Linux | cups-server-common Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [cups-server-common 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-cups-server-common-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |
| Linux | libcups2 Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [libcups2 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libcups2-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |
| Linux | libcupscgi1 Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [libcupscgi1 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libcupscgi1-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |
| Linux | libcupsimage2 Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [libcupsimage2 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libcupsimage2-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |
| Linux | libcupsmime1 Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [libcupsmime1 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libcupsmime1-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |
| Linux | libcupsppdc1 Ubuntu 18.04.6 LTS (bionic) | 2.2.7-1ubuntu2.1 | [libcupsppdc1 2.2.7-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libcupsppdc1-2.2.7-1ubuntu2.1.md) | Jul 10, 2018 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo