RHEL 8 : cups (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - cups: insecure permissions of /var/log/cups allows for symlink attacks CVE-2021-25317 - cups, libppd:...

RHEL 9 : cups (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - cups: insecure permissions of /var/log/cups allows for symlink attacks CVE-2021-25317 - cups, libppd:...

RHEL 7 : foomatic (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - cups-filters: foomatic-rip did not consider semicolon as illegal shell escape character CVE-2015-8560 -...

Debian: Security Advisory (DLA-3820-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : cups (EulerOS-SA-2024-1676)

According to the versions of the cups packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to...

EulerOS Virtualization 3.0.6.6 : cups (EulerOS-SA-2024-1646)

According to the versions of the cups packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to...

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2024-1676)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2024-1646)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 : cups (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - cups: stack-buffer-overflow in libcups's asn1getpacked function CVE-2019-8696 - In macOS High Sierra befo...

RHEL 6 : cups,_libppd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - cups, libppd: Postscript Parsing Heap Overflow CVE-2023-4504 Note that Nessus has not tested for this issue but has...

RHEL 7 : cups,_libppd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - cups, libppd: Postscript Parsing Heap Overflow CVE-2023-4504 Note that Nessus has not tested for this issue but has...

RHEL 7 : cups (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - cups: access to uninitialized buffer in ipp.c CVE-2020-10001 - cups: use-after-free in cupsdAcceptClient ...

CBL Mariner 2.0 Security Update: cups (CVE-2023-32324)

The version of cups installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-32324 advisory. - OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow...

CBL Mariner 2.0 Security Update: cups (CVE-2023-4504)

The version of cups installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4504 advisory. - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libpp...

CBL Mariner 2.0 Security Update: cups (CVE-2023-34241)

The version of cups installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-34241 advisory. - OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating...

CVE-2023-4504 affecting package cups for versions less than 2.3.3op2-7

CVE-2023-4504 affecting package cups for versions less than 2.3.3op2-7. A patched version of the package is available...

CVE-2023-34241 affecting package cups for versions less than 2.3.3op2-7

CVE-2023-34241 affecting package cups for versions less than 2.3.3op2-7. A patched version of the package is available...

CVE-2023-32324 affecting package cups for versions less than 2.3.3op2-7

CVE-2023-32324 affecting package cups for versions less than 2.3.3op2-7. A patched version of the package is available...

CUPS vulnerable to use-after-free in cupsdAcceptClient()

...

cups: heap buffer overflow may lead to DoS

A flaw was found in the Cups package. A buffer overflow vulnerability in the |formatlogline| function could allow remote attackers to cause a denial of service. Exploitation is only possible when the configuration file, cupsd.conf, has the value of loglevel set to DEBUG...