6452 matches found
USN-5454-2: CUPS vulnerabilities
USN-5454-1 fixed several vulnerabilities in CUPS. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Joshua Mason discovered that CUPS incorrectly handled the secret key used to access the administrative web interface. A remote attacker could possibly u...
Information Disclosure
cups is vulnerable to information disclosure. The vulnerability exists due to an out of bounds read due to lack of validation...
USN-5454-1 cups vulnerabilities
Joshua Mason discovered that CUPS incorrectly handled the secret key used to access the administrative web interface. A remote attacker could possibly use this issue to open a session as an administrator and execute arbitrary code. CVE-2022-26691 It was discovered that CUPS incorrectly handled...
USN-5454-1: CUPS vulnerabilities
Joshua Mason discovered that CUPS incorrectly handled the secret key used to access the administrative web interface. A remote attacker could possibly use this issue to open a session as an administrator and execute arbitrary code. CVE-2022-26691 It was discovered that CUPS incorrectly handled...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : CUPS vulnerabilities (USN-5454-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5454-1 advisory. Joshua Mason discovered that CUPS incorrectly handled the secret key used to access the administrative web interface. A remote...
Privilege Escalation
cups is vulnerable to privilege escalation. The vulnerability exists due to gain elevated privileges which allows an attacker to authenticate to CUPS as root/admin without the 32-byte secret key...
Debian: Security Advisory (DSA-5149-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15 / SLES15 Security Update : cups (SUSE-SU-2022:1861-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1861-1 advisory. - A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina,...
Debian DSA-5149-1 : cups - security update
The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5149 advisory. - A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An...
DLA-3029-1 cups - security update
Bulletin has no description...
openSUSE: Security Advisory for cups (SUSE-SU-2022:1861-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE: Security Advisory (SUSE-SU-2022:1861-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware: Security Advisory (SSA:2022-146-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware Linux 14.2 / 15.0 / current cups Vulnerability (SSA:2022-146-01)
The version of cups installed on the remote host is prior to 2.1.4 / 2.4.2. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-146-01 advisory. - A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS...
Debian DLA-3029-1 : cups - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3029 advisory. Joshua Mason discovered that a logic error in the validation of the secret key used in the local authorisation mode of the CUPS printing system may result in privilege...
[SECURITY] [DLA 3029-1] cups security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3029-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 27, 2022 https://wiki.debian.org/LTS -...
[SECURITY] [DSA 5149-1] cups security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5149-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 26, 2022 https://www.debian.org/security/faq -...
[slackware-security] cups
New cups packages are available for Slackware 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/cups-2.4.2-i586-1slack15.0.txz: Upgraded. Fixed certificate strings comparison for Local authorization. For more information, se...
AZL-37072 CVE-2022-26691 affecting package cups for versions less than 2.3.3op2-8
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges...
CVE-2022-26691
An authorization vulnerability was found in the CUPS printing system. This security vulnerability occurs when local authorization happens. This flaw allows an attacker to authenticate to CUPS as root/admin without the 32-byte secret key and perform arbitrary code execution. Mitigation Red Hat has...