387 matches found
AZL-71149 CVE-2025-58436 affecting package cups for versions less than 2.3.3op2-11
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue...
AZL-71146 CVE-2025-61915 affecting package cups for versions less than 2.4.16-1
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config a...
ALPINE-CVE-2025-58436
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue...
CVE-2025-61915
CVE-2025-61915 affects OpenPrinting CUPS. A user in the lpadmin group can use the cups web UI to alter cupsd.conf, which the root-running cupsd then parses, causing an out-of-bounds write. Impact exists locally (privileges required: HIGH) with potential DoS/compromised availability; patched in ve...
OpenPrinting CUPS 资源管理错误漏洞
OpenPrinting CUPS is a standards-based open source printing system for Linux® and other Unix®-like operating systems from OpenPrinting, Inc. A resource management error vulnerability exists in OpenPrinting CUPS versions prior to 2.4.15, which stems from a client sending a slow message that could...
OpenPrinting CUPS 输入验证错误漏洞
OpenPrinting CUPS is a standards-based open source printing system for Linux® and other Unix®-like operating systems from OpenPrinting, Inc. An input validation error vulnerability exists in OpenPrinting CUPS versions prior to 2.4.15, which originates from a configuration change that can be made ...
CVE-2025-58436: Uncontrolled Resource Consumption
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue...
CVE-2025-61915: Improper Validation of Array Index
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config a...
OpenPrinting CUPS Filters 安全漏洞
OpenPrinting CUPS Filters is an OpenPrinting open source printing system filter. A security vulnerability exists in OpenPrinting CUPS Filters version 2.0.1 and earlier, which stems from a heap buffer overflow in the rastertopclx filter that could lead to memory corruption and execution of arbitra...
Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2025-2350)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OpenPrinting CUPS Filters 缓冲区错误漏洞
OpenPrinting CUPS Filters is an OpenPrinting open source printing system filter. A buffer error vulnerability exists in versions of OpenPrinting CUPS Filters prior to 1.28.18, which stems from an array out-of-bounds write when the pdftoraster tool processes PDF files...
Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2025-2319)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 42 : golang-github-openprinting-ipp-usb (2025-d9921d4ed5)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d9921d4ed5 advisory. Rebuild with the latest golang in repos Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Fedora 41 : golang-github-openprinting-ipp-usb (2025-9d12a32bce)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-9d12a32bce advisory. Rebuild with the latest golang in repos Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
[SECURITY] Fedora 43 Update: golang-github-openprinting-ipp-usb-0.9.30-7.fc43
HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol...
Fedora 43 : golang-github-openprinting-ipp-usb (2025-46b6a955b3)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-46b6a955b3 advisory. Rebuild with the latest golang in repos Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
AlmaLinux 10 : golang-github-openprinting-ipp-usb (ALSA-2025:9156)
The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:9156 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly fr...
EUVD-2011-4334
Malware in sbrugna...
RockyLinux 10 : golang-github-openprinting-ipp-usb (RLSA-2025:9156)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9156 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly...