CVE-2024-47175

A security issue was found in OpenPrinting CUPS. The function ppdCreatePPDFromIPP2 in the libppd library is responsible for generating a PostScript Printer Description PPD file based on attributes retrieved from an Internet Printing Protocol IPP response. Essentially, it takes printer information...

CVE-2024-47076

A flaw was found in OpenPrinting CUPS. In certain conditions, a remote attacker can add a malicious printer or directly hijack an existing printer by replacing the valid IPP URL with a malicious one. Also, it is possible that due to a lack of validation of IPP attributes returned by the server,...

PT-2024-6502

Name of the Vulnerable Software and Affected Versions CUPS versions prior to the fixed version Description The issue is related to the cfGetPrinterAttributes5 function in libcupsfilters, which does not sanitize IPP attributes returned from an IPP server. This can lead to attacker-controlled data...

PT-2024-40863 · Cups · Cups

Name of the Vulnerable Software and Affected Versions: CUPS affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the cups fill function, which is called by cupsFileRead and ippReadIO. Recommendations: At the...

CVE-2024-28887

Uncontrolled search path in some IntelR IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28887

Uncontrolled search path in some IntelR IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21784

Uncontrolled search path for some IntelR IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21784

Uncontrolled search path for some IntelR IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21784

Uncontrolled search path for some IntelR IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21784

CVE-2024-21784 concerns an uncontrolled search path in Intel IPP Cryptography software before version 2021.11, potentially enabling local escalation of privilege for an authenticated user. Intel's advisory (INTEL-SA-01114) notes affected products include Intel IPP Cryptography prior to 2021.11 an...

CVE-2024-28887

Uncontrolled search path in some IntelR IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28887

Uncontrolled search path in some IntelR IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28887

The CVE-2024-28887 issue is an Uncontrolled search path vulnerability in Intel® IPP software prior to 2021.11, which could allow an authenticated local user to escalate privileges. Affected products include Intel® IPP and Intel® oneAPI Base Toolkit prior to the specified versions. The Intel advis...

PT-2024-22627 · Intel · Intel Ipp

Name of the Vulnerable Software and Affected Versions: IntelR IPP software versions prior to 2021.11 Description: The issue is related to an uncontrolled search path in some IntelR IPP software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-7025 · Intel · Intel Ipp Cryptography

Name of the Vulnerable Software and Affected Versions: IntelR IPP Cryptography software versions prior to 2021.11 Description: The issue is related to an uncontrolled search path in some IntelR IPP Cryptography software, which may allow an authenticated user to potentially enable escalation of...

Intel® IPP Cryptography Software Advisory

Summary: A potential security vulnerability in some Intel® Integrated Performance Primitives Cryptography Intel® IPP Cryptography software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21784...

RICOH Printers Multiple Vulnerabilities (ricoh-2024-000003)

Multiple RICOH printers and multifunction printers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Lexmark CX331adwe IPP Server Authorization HTTP Header Heap-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX331adwe printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IPP server, which listens on TCP port 631 by default. The issue...

RICOH SP C250 Series Denial of Service (CVE-2019-14310)

Ricoh SP C250DN 1.05 devices allow denial of service issue 2 of 3. Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets This plugin only works with Tenable.o...

[SECURITY] Fedora 37 Update: golang-github-openprinting-ipp-usb-0.9.23-5.fc37

HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol...