CVE-2024-47076

A flaw was found in OpenPrinting CUPS. In certain conditions, a remote attacker can add a malicious printer or directly hijack an existing printer by replacing the valid IPP URL with a malicious one. Also, it is possible that due to a lack of validation of IPP attributes returned by the server,...

PT-2024-6502

Name of the Vulnerable Software and Affected Versions CUPS versions prior to the fixed version Description The issue is related to the cfGetPrinterAttributes5 function in libcupsfilters, which does not sanitize IPP attributes returned from an IPP server. This can lead to attacker-controlled data...

PT-2024-8003

Name of the Vulnerable Software and Affected Versions CUPS cups-browsed versions prior to 2.5b1 Description The issue is related to an uncontrolled resource consumption in the CUPS cups-browsed service, which can be exploited by a remote attacker to cause a denial of service. It is also associate...

CUPS IPP Attributes LAN Remote Code Execution

This module exploits vulnerabilities in OpenPrinting CUPS, which is running by default on most Linux distributions. The vulnerabilities allow an attacker on the LAN to advertise a malicious printer that triggers remote code execution when a victim sends a print job to the malicious printer...

PT-2024-40863 · Cups · Cups

Name of the Vulnerable Software and Affected Versions: CUPS affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the cups fill function, which is called by cupsFileRead and ippReadIO. Recommendations: At the...

CVE-2024-28887

Uncontrolled search path in some IntelR IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28887

Uncontrolled search path in some IntelR IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21784

Uncontrolled search path for some IntelR IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21784

Uncontrolled search path for some IntelR IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21784

Uncontrolled search path for some IntelR IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21784

CVE-2024-21784 concerns an uncontrolled search path in Intel IPP Cryptography software before version 2021.11, potentially enabling local escalation of privilege for an authenticated user. Intel's advisory (INTEL-SA-01114) notes affected products include Intel IPP Cryptography prior to 2021.11 an...

CVE-2024-28887

Uncontrolled search path in some IntelR IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28887

The CVE-2024-28887 issue is an Uncontrolled search path vulnerability in Intel® IPP software prior to 2021.11, which could allow an authenticated local user to escalate privileges. Affected products include Intel® IPP and Intel® oneAPI Base Toolkit prior to the specified versions. The Intel advis...

CVE-2024-28887

Uncontrolled search path in some IntelR IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-22627 · Intel · Intel Ipp

Name of the Vulnerable Software and Affected Versions: IntelR IPP software versions prior to 2021.11 Description: The issue is related to an uncontrolled search path in some IntelR IPP software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-7025 · Intel · Intel Ipp Cryptography

Name of the Vulnerable Software and Affected Versions: IntelR IPP Cryptography software versions prior to 2021.11 Description: The issue is related to an uncontrolled search path in some IntelR IPP Cryptography software, which may allow an authenticated user to potentially enable escalation of...

Intel® IPP Cryptography Software Advisory

Summary: A potential security vulnerability in some Intel® Integrated Performance Primitives Cryptography Intel® IPP Cryptography software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21784...

RICOH Printers Multiple Vulnerabilities (ricoh-2024-000003)

Multiple RICOH printers and multifunction printers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

cups:fuzz_ipp: Use-of-uninitialized-value in cups_array_find

Project: https://github.com/OpenPrinting/cups.git Detailed Report: https://oss-fuzz.com/testcase?key=6378705441062912 Project: cups Fuzzing Engine: libFuzzer Fuzz Target: fuzzipp Job Type: libfuzzermsancups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Lexmark CX331adwe IPP Server Authorization HTTP Header Heap-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX331adwe printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IPP server, which listens on TCP port 631 by default. The issue...