PT-2024-6503

Name of the Vulnerable Software and Affected Versions CUPS affected versions not specified Description The issue is related to the libppd function ppdCreatePPDFromIPP2 not sanitizing IPP attributes when creating the PPD buffer. This can result in user-controlled input and ultimately code executio...

PT-2024-13963 · Lexmark · Lexmark Devices

Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: A buffer overflow vulnerability has been identified in the Internet Printing Protocol IPP in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute...

Lexmark Printer RCE Vulnerability (CVE-2023-50739)

Multiple Lexmark printer devices are prone to remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFI...

The vulnerability of the IPP microprogramming software for Canon printers of the imageCLASS D, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, MAXIFY series allows a hacker to execute arbitrary code.

The vulnerability of the IPP microprogramming software for Canon printers of the imageCLASS D, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, and MAXIFY series is related to buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Canon printer software of the imageCLASS D, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, MAXIFY series is related to buffer overflow in the driver. This allows an attacker to execute arbitrary code.

The vulnerability of the IPP Handler component in Canon’s imageCLASS D, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, and MAXIFY printers involves a buffer overflow on the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Internet Printing Protocol (IPP) implementation in Canon printer software of the imageCLASS D, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, MAXIFY series allows a hacker to execute arbitrary code.

The vulnerability of the Internet Printing Protocol IPP implementation in Canon printer software of the imageCLASS D, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, and MAXIFY series is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute...

Internet Printing Protocol (IPP) Detection

Detection of services supporting the Internet Printing Protocol IPP. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

(Pwn2Own) Canon imageCLASS MF743Cdw IPP sides Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF743Cdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Internet Printing Protocol IPP service. The issue resul...

(Pwn2Own) Canon imageCLASS MF743Cdw IPP number-up Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF743Cdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Internet Printing Protocol IPP service. The issue resul...

PT-2023-6482 · Canon · Canon Office / Small Office Multifunction Printers/Laser Printers +1

Name of the Vulnerable Software and Affected Versions: Canon imageCLASS series versions prior to firmware Ver.11.04 Canon Office / Small Office Multifunction Printers and Laser Printers versions prior to firmware Ver.11.04 Description: The issue is related to a buffer overflow in the IPP sides...

SUSE CVE-2003-0195

CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port 631, which does not time out...

SUSE CVE-2003-0788

Unknown vulnerability in the Internet Printing Protocol IPP implementation in CUPS before 1.1.19 allows remote attackers to cause a denial of service CPU consumption from a "busy loop" via certain inputs to the IPP port TCP 631...

SUSE CVE-2007-4351

Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service crash via a crafted 1 textWithLanguage or 2 nameWithLanguage Internet Printing Protocol IPP tag, leading to a stack-based buffer overflow...

SUSE CVE-2008-0597

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service crash via crafted IPP packets...

SUSE CVE-2009-0949

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a scheduler request with two consecutive IPPTAGUNSUPPORTED tags...

UBUNTU-CVE-2021-39920

NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file...

Apple CUPS Buffer Overflow Vulnerability

Apple CUPS is the United States Apple Apple company's set of open source for OS X and Unix-like system printing system. The system is based on the Internet Printing Protocol IPP, providing most PostScript and raster printer services. A buffer overflow vulnerability exists in Apple CUPS. The...

Arbitrary Code Execution

cups is vulnerable to arbitrary code execution. A flaw was found in the way CUPS handles certain Internet Printing Protocol IPP tags. A remote attacker who is able to connect to the IPP TCP port could send a malicious request causing the CUPS daemon to crash, or potentially execute arbitrary code...

Kyocera ECOSYS M5526CDW Buffer Overflow Vulnerability (CNVD-2020-20742)

The Kyocera ECOSYS M5526CDW is a multifunction printer from Kyocera Japan. A buffer overflow vulnerability exists in the IPP service in the Kyocera ECOSYS M5526CDW version 2R72000.001.701, which can be exploited by an attacker to cause a denial of service or execute arbitrary code...

CVE-2019-14310

Ricoh SP C250DN 1.05 devices allow denial of service issue 2 of 3. Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets...