ROS-20260622-73-0023

The vulnerability of the cfFilterImageToRaster function in the printing server of CUPS involves reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

CUPS Pointer Arithmetic DoS

The vulnerability of the CUPS printing server is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CUPS Heap Buffer Overflow DoS

The vulnerability of the cupsArrayAddStrings function on CUPS printing servers is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures...

CUPS copy_stack() Heap Buffer Overflow DoS

The vulnerability of the copystack function in the CUPS printing server relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

CUPS Resource Consumption DoS

The vulnerability of the CUPS printing server is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to cause a service failure...

CUPS ppdEmitString Heap Buffer Overflow DoS

The vulnerability of the ppdEmitString function in the CUPS printing server is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created PPD file...

CUPS symbolic link Access Disclosure

The vulnerability of the CUPS printing server is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to gain access to confidential data when running the cupsd server with the Listen configuration element...

CUPS Printing Server Auth Bypass

The vulnerability of the CUPS printing server is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

CUPS httpClose DoS

The vulnerability of the httpClose function in a CUPS printing server lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause service failures...

CUPS Component Heap Buffer Overflow DoS

The vulnerability of the ippReadIO function in the cups/ipp.c component of the printing server CUPS is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to gain access to confidential information remotely...

cups: Predictable session cookie breaks CSRF protection

REJECTED CVE A predictable session cookie vulnerability was identified in the CUPS printing server. Insufficient randomness in session cookie generation made it easy to guess, undermining CSRF protection. This flaw allowed unauthorized scripted access to the CUPS web interface when enabled, posin...

CUPS add_job function Heap Buffer Overflow DoS

The vulnerability of the addjob function in the scheduler/ipp.c file of the CUPS print server is related to insufficient validation of input data when D-Bus support is enabled. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...

CUPS Printing Server Auth Bypass Info Disclosure

The vulnerability of the CUPS printing server is related to the improper handling of certain include directives. This allows unprivileged users to gain access to and read arbitrary files from the superuser’s perspective. Exploiting this vulnerability enables a perpetrator to gain access to...

CUPS Printing Server Code Execution

The vulnerability of the addjob function in the scheduler/ipp.c file of the CUPS printing server is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to modify the device configuration file remotely or execute arbitrary code using specially crafted...