CVE-2026-34979

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer overflow in the CUPS scheduler when building filter option strings from job attribute. At time of publication, there are no publicly...

cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes

A flaw was found in OpenPrinting CUPS. In certain conditions, a remote attacker can add a malicious printer or directly hijack an existing printer by replacing the valid IPP URL with a malicious one. Also, it is possible that due to a lack of validation of IPP attributes returned by the server,...

Improper Input Validation

cups-filter is vulnerable to Improper Input Validation. The cfGetPrinterAttributes5 function in libcupsfilters does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be...

PT-2024-6441

Name of the Vulnerable Software and Affected Versions CUPS versions 2.x cups-filters versions up to 2.0.1 Description The issue is related to the FoomaticRIPCommandLine function in the CUPS printing system, which allows remote command execution via a PPD file. This can be exploited when combined...

cups: Manipulation of cupsd.conf by a local attacker resulting in limited reads of arbitrary files as root

In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions...

PDF JBIG2 multiple input validation flaws

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...

phpPrintAnalyzer <= 1.1 (rep_par_rapport_racine) Remote File Inclusion Vulnerability

--------------------------------------------------------------------------------------- phpPrintAnalyzer 1.1 repparrapportracine Remote File Inclusion --------------------------------------------------------------------------------------- Author : Sh3ll Date : 2006/04/27 Location : Iran - Tehran...

Fedora Core 2 : cups-1.1.20-11.3 (2004-275)

This update fixes a denial of service problem causing loss of browse services. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-0558 to this issue. In addition, this update fixes the cupsenable, cupsdisable and accept commands. Note that Tenable Networ...