3223 matches found
[SECURITY] Fedora 43 Update: cups-2.4.17-1.fc43
CUPS printing system provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...
CVE-2026-6643 A stack-based buffer overflow vulnerability in the VPN Clients on the ADM
A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems from the use of unbounded sscanf and passing user-controlled data directly to printf. Due to the lack of PIE and Stack Canary protections, an authenticated remote attacker can exploit these to...
CVE-2026-6643
ASUSTOR ADM VPN clients (ADM 4.1.0–4.3.3.RR42 and 5.0.0–5.1.2.REO1) are affected by CVE-2026-6643 due to a stack-based buffer overflow caused by unbounded sscanf() and passing user-controlled data to printf() in vpnupload.cgi (upload_wireguard). The vulnerability can lead to code execution as the...
The vulnerability of the CUPS printing server stems from incorrect restrictions on the path to the directory, allowing attackers to compromise the integrity and accessibility of the protected information.
The vulnerability of the CUPS printing server is related to an incorrect restriction on the path to the directory during the processing of the notify-recipient-uri parameter. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected...
The vulnerability of the cupsd server daemon in the CUPS printing system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the cupsd server in the CUPS printing system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the get_options function in the CUPS printing server allows a attacker to execute arbitrary code.
The vulnerability of the getoptions function in the CUPS printing server is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
cups: CUPS: Denial of Service and potential arbitrary code execution via use-after-free vulnerability when deleting temporary printers.
A flaw was found in CUPS, an open-source printing system. This vulnerability, known as a use-after-free, occurs in the CUPS scheduler when temporary printers are automatically removed. The system fails to properly manage memory, leaving a pointer to a freed memory location. An attacker could...
cups: OpenPrinting CUPS: Authorization bypass via case-insensitive username comparison
A flaw was found in OpenPrinting CUPS. This authorization bypass vulnerability allows an unprivileged user to gain unauthorized access to restricted operations. This can be exploited by using a username that differs only in case from an authorized user during authorization checks...
cups: OpenPrinting CUPS: Denial of Service via heap-based buffer overflow in job attribute processing
A flaw was found in OpenPrinting CUPS. A remote attacker could exploit a heap-based buffer overflow by sending specially crafted job attributes when building filter option strings. This could lead to a denial of service, making the printing system unavailable...
cups: OpenPrinting CUPS: Denial of Service via path traversal in RSS notifier
A flaw was found in OpenPrinting CUPS. A remote attacker can exploit a path traversal vulnerability in the RSS notifier by manipulating the notify-recipient-uri. This allows writing arbitrary RSS XML data to sensitive files outside the intended directory. This can lead to a denial of service DoS ...
cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS
A flaw was found in the CUPS printing system’s ippreadio function, which handles Internet Printing Protocol IPP requests. When processing specially crafted printer attribute responses, improper validation can cause a null pointer dereference. This leads to a crash in libcups, potentially disrupti...
cups: CUPS: Denial of Service via integer underflow in IPP attribute handling
A flaw was found in CUPS, an open-source printing system. An unprivileged local user can exploit an integer underflow vulnerability by providing a negative job-password-supported Internet Printing Protocol IPP attribute. This manipulation causes the cupsd root process to crash, which can be...
OESA-2026-1932 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: OpenPrinting CUPS is an open source printing system for Linux and othe...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: cups (UTSA-2026-010663)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010663 advisory. OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can coer...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: cups (UTSA-2026-010665)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010665 advisory. OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a...
The vulnerability of the USB Printing Stack driver (usbprint.sys) on Windows operating systems, which allows a hacker to escalate their privileges
The vulnerability of the USB Printing Stack driver usbprint.sys in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
ImageMagick has a heap-use-after-free via XMP profile could result in a crash when printing the values.
An heap use after free when reading an invalid XMP profile could result in a crash due to an heap use after free when printing the values...
CVE-2026-32223 Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability
...
CVE-2026-32223
CVE-2026-32223 affects the Windows USB Printing Stack (usbprint.sys). The entry notes Elevation of Privilege with physical attack vector, low complexity, no privileges required, and no user interaction, with high impact on confidentiality, integrity, and availability. The provided data does not i...
