Every CVE Search/ Get API key

CVE-2021-25317

cups: ownership of /var/log/cups allows the lp user to create files as root

3.3 LowFix available

A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.27%Unchanged since May 5, 2021
90%50%10%1%

What each source reports

CVE List Score used 3.3

cups: ownership of /var/log/cups allows the lp user to create files as root

A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.

Record
CVE-2021-25317
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-276
Updated
2026-11-02
EUVDEUVD-2021-12215 3.3

A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.

Record
EUVD-2021-12215
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-7qpc-9fjw-5c32 3.3

A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise...

A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.

Record
GHSA-7qpc-9fjw-5c32
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-276
Updated
2026-11-02
NVD 3.3

A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.

Record
CVE-2021-25317
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-276
Updated
2026-11-02
OSV 3.3

A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.

Record
CVE-2021-25317
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-03
OSVOESA-2021-1212 3.3

cups security update

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet PrintingProtocol (IPP) to support printing to local and network printers..

Security Fix(es):

A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.(CVE-2021-25317)

Record
OESA-2021-1212
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 7 moreShow less
OSVCLSA-2026-1785510391 No score

cups: Fix of 2 CVEs

  • CVE-2021-25317: install /var/log/cups as 0700 root:sys instead of 0755 lp:sys so the 'lp' user cannot plant symlinks that cupsd follows on log creation. This matches the mode cupsd itself computes for the log directory (0300|LogFilePerm with --with-log-file-perm=0600).
  • CVE-2025-58364: already addressed by Patch103 (upstream e58cba9d), shipped in 1:1.6.3-52.tuxcare.els5; no code change in this release.
Record
CLSA-2026-1785510391
Updated
2026-11-02
OSVCLSA-2026-1787145903 No score

cups: Fix of CVE-2021-25317

  • CVE-2021-25317: ship /var/log/cups owned by root:lp instead of lp:sys so a local lp user can no longer plant a symlink in the log directory and make the root cupsd create arbitrary root-owned files, matching current RHEL 9 packaging
Record
CLSA-2026-1787145903
Updated
2026-11-02
OSVopenSUSE-SU-2021:0638-1 No score

Security update for cups

This update for cups fixes the following issues:

  • CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:0638-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10707-1 No score

cups-2.3.3op2-4.2 on GA media

These are all security issues fixed in the cups-2.3.3op2-4.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10707-1
Updated
2026-11-02
OSVSUSE-SU-2021:1453-1 No score

Security update for cups

This update for cups fixes the following issues:

  • CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)
Record
SUSE-SU-2021:1453-1
Updated
2026-11-02
OSVSUSE-SU-2021:1454-1 No score

Security update for cups

This update for cups fixes the following issues:

  • CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)
Record
SUSE-SU-2021:1454-1
Updated
2026-11-02
OSVSUSE-SU-2021:14712-1 No score

Security update for cups

This update for cups fixes the following issues:

  • CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)
Record
SUSE-SU-2021:14712-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cups
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1:1.6.3-52.el7_9.tuxcare.els7
1:1.6.3-52.el7_9.tuxcare.els7
cups-client
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1:1.6.3-52.el7_9.tuxcare.els7
1:1.6.3-52.el7_9.tuxcare.els7
cups-devel
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1:1.6.3-52.el7_9.tuxcare.els7
1:1.6.3-52.el7_9.tuxcare.els7
cups-filesystem
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1:1.6.3-52.el7_9.tuxcare.els7
1:1.6.3-52.el7_9.tuxcare.els7
cups-ipptool
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1:1.6.3-52.el7_9.tuxcare.els7
1:1.6.3-52.el7_9.tuxcare.els7
cups-libs
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1:1.6.3-52.el7_9.tuxcare.els7
1:1.6.3-52.el7_9.tuxcare.els7
cups-lpd
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1:1.6.3-52.el7_9.tuxcare.els7
1:1.6.3-52.el7_9.tuxcare.els7
cups
TuxCare:AlmaLinux:9.2
 before 1:2.3.3op2-16.el9_2.1.tuxcare.els15
1:2.3.3op2-16.el9_2.1.tuxcare.els15
cups-client
TuxCare:AlmaLinux:9.2
 before 1:2.3.3op2-16.el9_2.1.tuxcare.els15
1:2.3.3op2-16.el9_2.1.tuxcare.els15
cups-devel
TuxCare:AlmaLinux:9.2
 before 1:2.3.3op2-16.el9_2.1.tuxcare.els15
1:2.3.3op2-16.el9_2.1.tuxcare.els15
Show 39 moreShow less
Affected packages
PackageAffectedFixed
cups-filesystem
TuxCare:AlmaLinux:9.2
 before 1:2.3.3op2-16.el9_2.1.tuxcare.els15
1:2.3.3op2-16.el9_2.1.tuxcare.els15
cups-ipptool
TuxCare:AlmaLinux:9.2
 before 1:2.3.3op2-16.el9_2.1.tuxcare.els15
1:2.3.3op2-16.el9_2.1.tuxcare.els15
cups-libs
TuxCare:AlmaLinux:9.2
 before 1:2.3.3op2-16.el9_2.1.tuxcare.els15
1:2.3.3op2-16.el9_2.1.tuxcare.els15
cups-lpd
TuxCare:AlmaLinux:9.2
 before 1:2.3.3op2-16.el9_2.1.tuxcare.els15
1:2.3.3op2-16.el9_2.1.tuxcare.els15
cups-printerapp
TuxCare:AlmaLinux:9.2
 before 1:2.3.3op2-16.el9_2.1.tuxcare.els15
1:2.3.3op2-16.el9_2.1.tuxcare.els15
cups
openEuler:20.03-LTS-SP1
 before 2.2.13-5.oe1
2.2.13-5.oe1
cups
SUSE:HPE Helion OpenStack 8
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:OpenStack Cloud 8
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:OpenStack Cloud 9
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:OpenStack Cloud Crowbar 8
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:OpenStack Cloud Crowbar 9
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:Linux Enterprise Server 12 SP5
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.7.5-20.36.1
1.7.5-20.36.1
cups
SUSE:Linux Enterprise Module for Basesystem 15 SP2
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Linux Enterprise Module for Development Tools 15 SP2
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Linux Enterprise Server 15-LTSS
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Linux Enterprise Server for SAP Applications 15
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Manager Proxy 4.0
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Manager Retail Branch Server 4.0
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Manager Server 4.0
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Enterprise Storage 6
 before 2.2.7-3.26.1
2.2.7-3.26.1
cups
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 1.3.9-8.46.56.18.1
1.3.9-8.46.56.18.1
cups
SUSE:Linux Enterprise Server 11 SP4-LTSS
 before 1.3.9-8.46.56.18.1
1.3.9-8.46.56.18.1
cups
openSUSE:Leap 15.2
 before 2.2.7-lp152.9.9.1
2.2.7-lp152.9.9.1
cups
openSUSE:Tumbleweed
From an advisory covering 20 CVEs
 before 2.3.3op2-4.2
2.3.3op2-4.2

History

History
RecordedChangedSources
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-25317 is a low vulnerability (CVSS 3.3) in Opensuse Factory, published April 30, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.27%, the 19th percentile. Fixed in cups 1:2.3.3op2-16.el9_2.1.tuxcare.els15.

References

Show 32 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open