PT-2025-55132

Уязвимость средства защиты и маркировки печати Parsec Cups связана с неправильным освобождением памяти перед удалением последней ссылки. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-55135

Уязвимость функции copy stack сервера печати CUPS связана с использованием памяти после её освобождения. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании...

Rocky Linux Updates in ASCG 3.3.0

Multiple Rocky Linux updates applied to Brocade ASCG 3.3.0 RockyLinux 8:bzip2 RLSA-2025:0733 bzip2: bzip2: Data integrity error when decompressing with data integrity tests fail. CVE-2019-12900 RockyLinux 8:pam RLSA-2024:10379 pam: libpam: Libpam vulnerable to read hashed password CVE-2024-10041...

cups:fuzz_http_core: Use-of-uninitialized-value in httpEncode64_3

Detailed Report: https://oss-fuzz.com/testcase?key=5431607404331008 Project: cups Fuzzing Engine: libFuzzer Fuzz Target: fuzzhttpcore Job Type: libfuzzermsancups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: httpEncode643 fuzzhttpcore.c fuzzhttpcore.c...

cups:fuzz_ppd_gen_cache: Use-of-uninitialized-value in cupsFileClose

Detailed Report: https://oss-fuzz.com/testcase?key=6055850768924672 Project: cups Fuzzing Engine: libFuzzer Fuzz Target: fuzzppdgencache Job Type: libfuzzermsancups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cupsFileClose ppdCacheWriteFile...

cups:fuzz_ppd_gen_cache: Crash in _ppdCacheWriteFile

Project: https://github.com/OpenPrinting/cups.git Detailed Report: https://oss-fuzz.com/testcase?key=4688253808869376 Project: cups Fuzzing Engine: afl Fuzz Target: fuzzppdgencache Job Type: aflasancups Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000001040 Crash State:...

cups:fuzz_ppd_gen_options: Heap-buffer-overflow in cupsCopyString

Project: https://github.com/OpenPrinting/cups.git Detailed Report: https://oss-fuzz.com/testcase?key=6563667921666048 Project: cups Fuzzing Engine: libFuzzer Fuzz Target: fuzzppdgenoptions Job Type: libfuzzerasancups Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

cups:fuzz_ppd_gen_options: Heap-buffer-overflow in cupsCopyString

Project: https://github.com/OpenPrinting/cups.git Detailed Report: https://oss-fuzz.com/testcase?key=6458756701683712 Project: cups Fuzzing Engine: libFuzzer Fuzz Target: fuzzppdgenoptions Job Type: libfuzzerasancups Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

Security Bulletin: cups vulnerability in BAMOE 8.0.5 images

Summary There was a cups library vulnerability in BAMOE 8.0.5 images, transitively brought in by RHEL base OS image layer. Vulnerability Details CVEID:CVE-2024-47175 DESCRIPTION: OpenPrinting libppd could allow a remote attacker to execute arbitrary command on the system, caused by the failure to...

cups:fuzz_ppd_gen_options: Heap-buffer-overflow in _cups_strcasecmp

Project: https://github.com/OpenPrinting/cups.git Detailed Report: https://oss-fuzz.com/testcase?key=5412775600128000 Project: cups Fuzzing Engine: libFuzzer Fuzz Target: fuzzppdgenoptions Job Type: libfuzzerasancups Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Astra Linux – Vulnerability in cups

The vulnerability of the cupsArrayAddStrings function on CUPS printing servers is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux – Vulnerability in parsec-cups

The vulnerability of the Parsec Cups protection and marking mechanism lies in the lack of memory release after the effective lifespan of the device. Exploiting this vulnerability could allow an attacker to trigger a maintenance failure...

TencentOS Server 4: cups (TSSA-2024:0910)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0910 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: cups (TSSA-2024:0323)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0323 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 3: cups (TSSA-2022:0154)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0154 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 3: cups-filters (TSSA-2024:0536)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0536 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 2: cups-filters (TSSA-2024:0529)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0529 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

TencentOS Server 4: cups (TSSA-2024:0507)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0507 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: cups (TSSA-2024:0911)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0911 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: cups-filters (TSSA-2023:0088)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0088 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...