Authentication Bypass

libcups.so is vulnerable to authentication bypass. The CUPS web interface uses an insecure function and seed to generate the session cookie, which results in a predictable token that can be guessed easily by a remote attacker to gain access to the application...

Sandbox Bypass

libcups.so is vulnerable to sandbox bypasses. The library does not properly handle error conditions, allowing a malicious user with sandbox root access to execute backends without a sandbox profile...

Arbitrary IPP Command Execution

libcups.so is vulnerable to arbitrary IPP command execution attacks. The vulnerability exists as a localhost.localdomain whitelist entry in the validhost function of scheduler/client.c allowed arbitrary IPP commands to be executed through POST requests to the CUPS daemon via DNS rebinding attacks...

Denial Of Service (DoS)

libcups.so is vulnerable to denial of service DoS attacks. The vulnerability exists as malicious users can supply usernames that contains invalid UTF-8 characters to cause a DoS attack...