Denial Of Service (DoS)

The Common UNIX Printing System CUPS is vulnerable to Denial of Service DoS. A use-after-free flaw was found in the way CUPS handled references in its file descriptors-handling interface. A remote attacker could, in a specially-crafted way, query for the list of current print jobs for a specific...

Denial Of Service (DoS)

The Common UNIX Printing System CUPS is vulnerable to Denial Of Service DoS. A bug was found in the way CUPS handled SSL negotiation. A remote user capable of connecting to the CUPS daemon could cause a denial of service to other CUPS users...

Access Restriction Bypass

The Common UNIX Printing System CUPS is vulnerable to local privilege escalation to root due to insecure environment variable handling...

CVE-2012-6094

CVE-2012-6094 affects the Common UNIX Printing System (CUPS). The issue is that the option to listen on localhost:631 is not honored, which could allow unauthorized access to the system’s web-based admin interface. Publicly documented mitigations include patches in cups updates (e.g., openSUSE cu...

CUPS: Multiple vulnerabilities

Background CUPS, the Common Unix Printing System, is a full-featured print server. Description Multiple vulnerabilities have been discovered in CUPS. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There i...

fly-admin-service-se Astra Linux Printing Failure

The vulnerability of the fly-admin-service-se administrative service package for the Astra Linux operating system is related to incorrect configuration of the Common UNIX Printing System CUPS in the Astra Linux Directory ALD. Exploiting this vulnerability could allow a malicious actor to cause...

Apple macOS High Sierra CUPS Unauthorized Access Vulnerability

Apple macOS High Sierra is a suite of specialized operating systems developed by Apple for Mac computers.CUPS is one of the open source printing system components for OS X and Unix-like systems. A security vulnerability exists in the CUPS component in Apple macOS High Sierra version 10.13.4. An...

Apple macOS High Sierra CUPS Sandbox Bypass Vulnerability (CNVD-2019-01536)

Apple macOS High Sierra is a suite of specialized operating systems developed by Apple for Mac computers.CUPS is one of the open source printing system components for OS X and Unix-like systems. A security vulnerability exists in the CUPS component in Apple macOS High Sierra version 10.13.4. An...

USN-3842-1 cups vulnerability

Jann Horn discovered that CUPS incorrectly handled session cookie randomness. A remote attacker could possibly use this issue to perform cross-site request forgery CSRF attacks...

cups: cross-site scripting flaw in CUPS web UI (VU#810572)

A cross-site scripting flaw was found in the cups web templating engine. An attacker could use this flaw to bypass the default configuration settings that bind the CUPS scheduler to the 'localhost' or loopback interface...

CUPS < 2.0.3 Multiple Vulnerabilities - Active Check

Common Unix Printing System CUPS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:cups...

UBUNTU-CVE-2015-1158

The addjob function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted 1 IPPCREATEJOB or 2 IPPPRINTJOB...

Apple CUPS cupsRasterReadPixels buffer overflow vulnerability

Apple CUPS is the United States Apple Apple company's set of open source for OS X and Unix-like system printing system. The system is based on the Internet Printing Protocol IPP, providing most PostScript and raster printer services. A buffer overflow vulnerability exists in Apple CUPS...

Debian Security Advisory DSA 2990-1 (cups - security update)

It was discovered that the web interface in CUPS, the Common UNIX Printing System, incorrectly validated permissions on rss files and directory index files. A local attacker could possibly use this issue to bypass file permissions and read arbitrary files, possibly leading to a privilege...

CVE-2014-2856

Cross-site scripting XSS vulnerability in scheduler/client.c in Common Unix Printing System CUPS before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the ispathabsolute function...

CVE-2014-2856

Cross-site scripting XSS vulnerability in scheduler/client.c in Common Unix Printing System CUPS before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the ispathabsolute function...

UBUNTU-CVE-2014-2856

Cross-site scripting XSS vulnerability in scheduler/client.c in Common Unix Printing System CUPS before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the ispathabsolute function...

CVE-2014-2856: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in scheduler/client.c in Common Unix Printing System CUPS before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the ispathabsolute function...

Oracle Linux 3 : cups (ELSA-2010-0754)

From Red Hat Security Advisory 2010:0754 : Updated cups packages that fix one security issue are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which...

CentOS Update for cups CESA-2013:0580 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...