Lucene search
+L

6 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•10 views

Astra Linux – Vulnerability in cups

OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and earlier, the RSS notifier allowed path traversal in notify-recipient-uri e.g., rss:///../job.cache, enabling a remote IPP client to write RSS XML bytes outside of CacheDir/r...

6.5CVSS6.5AI score0.0042EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2026/04/20 12:00 a.m.•10 views

The vulnerability of the CUPS printing server stems from incorrect restrictions on the path to the directory, allowing attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the CUPS printing server is related to an incorrect restriction on the path to the directory during the processing of the notify-recipient-uri parameter. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected...

6.5CVSS7AI score0.0042EPSS
SaveExploits1References11Affected Software4
OSV
OSV
•added 2026/04/03 10:16 p.m.•34 views

AZL-81819 CVE-2026-34978 affecting package cups for versions less than 2.4.17-1

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, the RSS notifier allows .. path traversal in notify-recipient-uri e.g., rss:///../job.cache, letting a remote IPP client write RSS XML bytes outside CacheDir/rss...

6.5CVSS6.7AI score0.0042EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/04/03 9:15 p.m.•71 views

CVE-2026-34978 OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, the RSS notifier allows .. path traversal in notify-recipient-uri e.g., rss:///../job.cache, letting a remote IPP client write RSS XML bytes outside CacheDir/rss...

6.5CVSS0.0042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/03 12:00 a.m.•2 views

CVE-2026-34978: Improper Limitation of a Pathname to a Restricted Directory

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, the RSS notifier allows .. path traversal in notify-recipient-uri e.g., rss:///../job.cache, letting a remote IPP client write RSS XML bytes outside CacheDir/rss...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/04/03 12:00 a.m.•16 views

OpenPrinting CUPS 安全漏洞

OpenPrinting CUPS is an open-source printing system developed by OpenPrinting Inc., suitable for Linux® and other Unix®-based operating systems. OpenPrinting CUPS versions 2.4.16 and earlier contain security vulnerabilities. These vulnerabilities stem from the RSS notification program, which allo...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits1References1
Rows per page
Query Builder