6398 matches found
PT-2024-6441
Name of the Vulnerable Software and Affected Versions CUPS versions 2.x cups-filters versions up to 2.0.1 Description The issue is related to the FoomaticRIPCommandLine function in the CUPS printing system, which allows remote command execution via a PPD file. This can be exploited when combined...
CVE-2024-47175: Improper Input Validation
CUPS is a standards-based, open-source printing system, and libppd can be used for legacy PPD file support. The libppd function ppdCreatePPDFromIPP2 does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as cfGetPrinterAttributes5, can...
cups 安全漏洞
CUPS is a standards-based open source printing system. An input validation error vulnerability exists in CUPS cups-browsed, which can be exploited by an attacker to remotely execute arbitrary commands on the target machine when starting a print job...
PT-2024-6502
Name of the Vulnerable Software and Affected Versions CUPS versions prior to the fixed version Description The issue is related to the cfGetPrinterAttributes5 function in libcupsfilters, which does not sanitize IPP attributes returned from an IPP server. This can lead to attacker-controlled data...
CVE-2024-47076: Improper Input Validation
CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former cups-filters package as library functions to be used for the data format conversion tasks needed in Printer Applications. The cfGetPrinterAttributes5 function in libcupsfilter...
CUPS IPP Attributes LAN Remote Code Execution
This module exploits vulnerabilities in OpenPrinting CUPS, which is running by default on most Linux distributions. The vulnerabilities allow an attacker on the LAN to advertise a malicious printer that triggers remote code execution when a victim sends a print job to the malicious printer...
cups-filters -- remote code execution
OpenPrinting reports: Due to the service binding to :631 INADDRANY , multiple bugs in cups-browsed can be exploited in sequence to introduce a malicious printer to the system. This chain of exploits ultimately enables an attacker to execute arbitrary commands remotely on the target machine withou...
RHSA-2024:5644 Red Hat Security Advisory: cups security update
Bulletin has no description...
RHSA-2024:4715 Red Hat Security Advisory: cups security update
Bulletin has no description...
RHSA-2024:4776 Red Hat Security Advisory: cups security update
Bulletin has no description...
RHSA-2024:4580 Red Hat Security Advisory: cups security update
Bulletin has no description...
RHSA-2024:4265 Red Hat Security Advisory: cups security update
Bulletin has no description...
RHSA-2023:4864 Red Hat Security Advisory: cups security update
Bulletin has no description...
RHSA-2023:4838 Red Hat Security Advisory: cups security update
Bulletin has no description...
RHSA-2023:4766 Red Hat Security Advisory: cups security update
Bulletin has no description...
RHSA-2023:4765 Red Hat Security Advisory: cups security update
Bulletin has no description...
RHSA-2023:4771 Red Hat Security Advisory: cups security update
Bulletin has no description...
RHSA-2023:4768 Red Hat Security Advisory: cups security update
Bulletin has no description...