CVE-2023-34241
CUPS vulnerable to use-after-free in cupsdAcceptClient()
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process.
The exact cause of this issue is the function httpClose(con->http) being called in scheduler/client.c. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function cupsdAcceptClient if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in cupsd.conf) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from /etc/hosts.allow and /etc/hosts.deny.
Version 2.4.6 has a patch for this issue.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
5.3
CUPS vulnerable to use-after-free in cupsdAcceptClient()
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process.
The exact cause of this issue is the function httpClose(con->http) being called in scheduler/client.c. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function cupsdAcceptClient if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in cupsd.conf) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from /etc/hosts.allow and /etc/hosts.deny.
Version 2.4.6 has a patch for this issue.
- Record
CVE-2023-34241- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-416
- Updated
- 2026-11-02
EUVDEUVD-2023-38329
5.3
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process.
The exact cause of this issue is the function httpClose(con->http) being called in scheduler/client.c. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function cupsdAcceptClient if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in cupsd.conf) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from /etc/hosts.allow and /etc/hosts.deny.
Version 2.4.6 has a patch for this issue.
- Record
EUVD-2023-38329- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-03
NVD
5.3
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process.
The exact cause of this issue is the function httpClose(con->http) being called in scheduler/client.c. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function cupsdAcceptClient if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in cupsd.conf) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from /etc/hosts.allow and /etc/hosts.deny.
Version 2.4.6 has a patch for this issue.
- Record
CVE-2023-34241- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSVALPINE-CVE-2023-34241
7.1
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process.
The exact cause of this issue is the function httpClose(con->http) being called in scheduler/client.c. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function cupsdAcceptClient if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in cupsd.conf) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from /etc/hosts.allow and /etc/hosts.deny.
Version 2.4.6 has a patch for this issue.
- Record
ALPINE-CVE-2023-34241- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVAZL-37074
7.1
CVE-2023-34241 affecting package cups for versions less than 2.3.3op2-7
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process.
The exact cause of this issue is the function httpClose(con->http) being called in scheduler/client.c. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function cupsdAcceptClient if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in cupsd.conf) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from /etc/hosts.allow and /etc/hosts.deny.
Version 2.4.6 has a patch for this issue.
- Record
AZL-37074- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVAZL-37099
7.1
CVE-2023-34241 affecting package cups for versions less than 2.4.10-1
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process.
The exact cause of this issue is the function httpClose(con->http) being called in scheduler/client.c. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function cupsdAcceptClient if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in cupsd.conf) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from /etc/hosts.allow and /etc/hosts.deny.
Version 2.4.6 has a patch for this issue.
- Record
AZL-37099- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
Show 23 moreShow less
OSVBELL-CVE-2023-34241
7.1
CVE-2023-34241 does not affect BellSoft software
- Record
BELL-CVE-2023-34241- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSV
5.3
CUPS vulnerable to use-after-free in cupsdAcceptClient()
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process.
The exact cause of this issue is the function httpClose(con->http) being called in scheduler/client.c. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function cupsdAcceptClient if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in cupsd.conf) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from /etc/hosts.allow and /etc/hosts.deny.
Version 2.4.6 has a patch for this issue.
- Record
CVE-2023-34241- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-416
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-34241
7.1
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process. The exact cause of this issue is the function httpClose(con->http) being called in scheduler/client.c. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function cupsdAcceptClient if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in cupsd.conf) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from /etc/hosts.allow and /etc/hosts.deny. Version 2.4.6 has a patch for this issue.
- Record
DEBIAN-CVE-2023-34241- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2023-1410
5.3
cups security update
Security Fix(es):
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process.
The exact cause of this issue is the function httpClose(con->http) being called in scheduler/client.c. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function cupsdAcceptClient if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in cupsd.conf) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from /etc/hosts.allow and /etc/hosts.deny.
Version 2.4.6 has a patch for this issue.(CVE-2023-34241)
- Record
OESA-2023-1410- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVRHSA-2023:6596
7.1
Red Hat Security Advisory: cups security and bug fix update
- Record
RHSA-2023:6596- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7165
7.1
Red Hat Security Advisory: cups security and bug fix update
- Record
RHSA-2023:7165- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:1101
7.1
Red Hat Security Advisory: cups security update
- Record
RHSA-2024:1101- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:1409
7.1
Red Hat Security Advisory: cups security update
- Record
RHSA-2024:1409- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-34241
7.1
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process. The exact cause of this issue is the function httpClose(con->http) being called in scheduler/client.c. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function cupsdAcceptClient if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in cupsd.conf) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from /etc/hosts.allow and /etc/hosts.deny. Version 2.4.6 has a patch for this issue.
- Record
UBUNTU-CVE-2023-34241- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVALSA-2023:6596 No score
Moderate: cups security and bug fix update
The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.
Security Fix(es):
- cups: heap buffer overflow may lead to DoS (CVE-2023-32324)
- cups: use-after-free in cupsdAcceptClient() in scheduler/client.c (CVE-2023-34241)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2023:6596- Updated
- 2026-11-02
OSVALSA-2023:7165 No score
Moderate: cups security and bug fix update
The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.
Security Fix(es):
- cups: heap buffer overflow may lead to DoS (CVE-2023-32324)
- cups: use-after-free in cupsdAcceptClient() in scheduler/client.c (CVE-2023-34241)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2023:7165- Updated
- 2026-11-02
OSVCLSA-2023-1689008452 No score
cups: Fix of CVE-2023-34241
- CVE-2023-34241: Fix use-after-free for CupsAcceptClient().
- Record
CLSA-2023-1689008452- Updated
- 2026-11-02
OSVCLSA-2023-1689008977 No score
cups: Fix of CVE-2023-34241
- CVE-2023-34241: Fix use-after-free for CupsAcceptClient().
- Record
CLSA-2023-1689008977- Updated
- 2026-11-02
OSVCLSA-2023-1689258794 No score
Fix CVE(s): CVE-2023-34241
- SECURITY UPDATE: use after free
- debian/patches/CVE-2023-34241.patch: call httpClose() after logging.
- CVE-2023-34241
- Fix test/run-stp-tests.sh
- debian/patches/waiting-limit.patch: limit the waiting for a server dunring tests.
- Record
CLSA-2023-1689258794- Updated
- 2026-11-02
OSVCLSA-2023-1691082968 No score
Fix CVE(s): CVE-2023-34241
- SECURITY UPDATE: use-after-free bug
- debian/patches/CVE-2023-34241.patch: Log result of httpGetHostname BEFORE closing the connection
- CVE-2023-34241
- Record
CLSA-2023-1691082968- Updated
- 2026-11-02
OSVCLSA-2024-1733245575 No score
cups: Fix of CVE-2023-34241
- CVE-2023-34241: Fix use-after-free bug in CUPS
- Record
CLSA-2024-1733245575- Updated
- 2026-11-02
OSVMGASA-2023-0223 No score
Updated cups packages fix security vulnerability
Use-after-free in cupsdAcceptClient(). (CVE-2023-34241)
- Record
MGASA-2023-0223- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13017-1 No score
cups-2.4.2-6.1 on GA media
These are all security issues fixed in the cups-2.4.2-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13017-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2616-1 No score
Security update for cups
This update for cups fixes the following issues:
- CVE-2023-34241: Fixed a use-after-free problem in cupsdAcceptClient() (bsc#1212230).
- Record
SUSE-SU-2023:2616-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:3706-1 No score
Security update for cups
This update for cups fixes the following issues:
- CVE-2023-4504: Fixed heap overflow in OpenPrinting CUPS Postscript Parsing (bsc#1215204).
- CVE-2023-34241: Fixed a use-after-free problem in cupsdAcceptClient() (bsc#1212230).
- CVE-2023-32360: Fixed information leak through Cups-Get-Document operation (bsc#1214254).
- Record
SUSE-SU-2023:3706-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20090-1 No score
Security update for cups
This update for cups fixes the following issues:
-
Version upgrade to 2.4.11: See https://github.com/openprinting/cups/releases CUPS 2.4.11 brings several bug fixes regarding IPP response validation, processing PPD values, Web UI support (checkbox support, modifying printers) and others fixes. Detailed list (from CHANGES.md):
- Updated the maximum file descriptor limit
for
cupsdto 64k-1 (Issue #989) - Fixed
lpoptions -dwith a discovered but not added printer (Issue #833) - Fixed incorrect error message for HTTP/IPP errors (Issue #893)
- Fixed JobPrivateAccess and SubscriptionPrivateAccess support for "all" (Issue #990)
- Fixed issues with cupsGetDestMediaByXxx (Issue #993)
- Fixed adding and modifying of printers via the web interface (Issue #998)
- Fixed HTTP PeerCred authentication for domain users (Issue #1001)
- Fixed checkbox support (Issue #1008)
- Fixed printer state notifications (Issue #1013)
- Fixed IPP Everywhere printer setup (Issue #1033) Issues are those at https://github.com/OpenPrinting/cups/issues In particular CUPS 2.4.11 contains those commit regarding IPP response validation and processing PPD values:
- "Quote PPD localized strings" https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd plus a cleanup to "Fix warnings for unused vars" https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Updated the maximum file descriptor limit
for
-
Version upgrade to 2.4.10: See https://github.com/openprinting/cups/releases CUPS 2.4.10 brings two fixes:
- Fixed error handling when reading a mixed 1setOf attribute.
- Fixed scheduler start if there is only domain socket to listen on (Issue #985) which is fix for regression after fix for CVE-2024-35235 in scenarios where is no other listeners in cupsd.conf than domain socket created on demand by systemd, launchd or upstart. Issues are those at https://github.com/OpenPrinting/cups/issues
-
Version upgrade to 2.4.9: See https://github.com/openprinting/cups/releases CUPS 2.4.9 brings security fix for CVE-2024-35235 and several bug fixes regarding CUPS Web User Interface, PPD generation and HTTP protocol implementation. Detailed list (from CHANGES.md):
- Fixed domain socket handling (CVE-2024-35235)
- Fixed creating of
cupsUrfSupportedPPD keyword (Issue #952) - Fixed searching for destinations in web ui (Issue #954)
- Fixed TLS negotiation using OpenSSL with servers that require the TLS SNI extension.
- Really raised
cups_enum_dests()timeout for listing available IPP printers (Issue #751)... - Fixed
Hostheader regression (Issue #967) - Fixed DNS-SD lookups of local services with Avahi (Issue #970)
- Fixed listing jobs in destinations in web ui. (Apple issue #6204)
- Fixed showing search query in web ui help page. (Issue #977) Issues are those at https://github.com/OpenPrinting/cups/issues Apple issues are those at https://github.com/apple/cups/issues
-
Update to version 2.4.8: See https://github.com/openprinting/cups/releases CUPS 2.4.8 brings many bug fixes which aggregated over the last half a year. It brings the important fix for race conditions and errors which can happen when installing permanent IPP Everywhere printer, support for PAM modules password-auth and system-auth and new option for lpstat which can show only the successful jobs. Detailed list (from CHANGES.md):
- Added warning if the device has to be asked for 'all,media-col-database' separately (Issue #829)
- Added new value for 'lpstat' option '-W' - successfull - for getting successfully printed jobs (Issue #830)
- Added support for PAM modules password-auth and system-auth (Issue #892)
- Updated IPP Everywhere printer creation error reporting (Issue #347)
- Updated and documented the MIME typing buffering limit (Issue #925)
- Raised 'cups_enum_dests()' timeout for listing …
- Record
SUSE-SU-2025:20090-1- Updated
- 2026-11-02
OSVUSN-6184-1 No score
cups vulnerability
It was discovered that CUPS incorrectly handled certain memory operations. An attacker could possibly use this issue to cause CUPS to crash, resulting in a denial of service, or possibly obtain sensitive information.
- Record
USN-6184-1- Updated
- 2026-11-02
OSVUSN-6184-2 No score
cups vulnerability
USN-6184-1 fixed a vulnerability in CUPS. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
Original advisory details:
It was discovered that CUPS incorrectly handled certain memory operations. An attacker could possibly use this issue to cause CUPS to crash, resulting in a denial of service, or to possibly obtain sensitive information.
- Record
USN-6184-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsAlpine:v3.15 |
2.2.0 up to 2.3.3-r8 | 2.3.3-r8 |
cupsAlpine:v3.16 |
2.2.0 up to 2.4.2-r2 | 2.4.2-r2 |
cupsAlpine:v3.17 |
2.2.0 up to 2.4.2-r3 | 2.4.2-r3 |
cupsAlmaLinux:9 From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-clientAlmaLinux:9 From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-develAlmaLinux:9 From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-filesystemAlmaLinux:9 From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-ipptoolAlmaLinux:9 From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-libsAlmaLinux:9 From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-lpdAlmaLinux:9 From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
Show 201 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cups-printerappAlmaLinux:9 From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cupsAlmaLinux:8 From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-clientAlmaLinux:8 From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-develAlmaLinux:8 From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-filesystemAlmaLinux:8 From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-ipptoolAlmaLinux:8 From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-libsAlmaLinux:8 From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-lpdAlmaLinux:8 From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cupsAzure Linux:2 |
before 2.3.3op2-7 | 2.3.3op2-7 |
cupsAzure Linux:3 |
before 2.4.10-1 | 2.4.10-1 |
cupsTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cups-clientTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cups-develTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cups-filesystemTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cups-ipptoolTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cups-libsTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cups-lpdTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cupsTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cups-clientTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cups-develTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cups-filesystemTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cups-ipptoolTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cups-libsTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cups-lpdTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els2 | 1:2.2.6-40.el8.tuxcare.els2 |
cupsTuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
cups-bsdTuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
cups-clientTuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
cups-commonTuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
cups-core-driversTuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
cups-daemonTuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
cups-ipp-utilsTuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
cups-ppdcTuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
cups-server-commonTuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
libcups2TuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
libcups2-devTuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
libcupscgi1TuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
libcupsimage2TuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
libcupsimage2-devTuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
libcupsmime1TuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
libcupsppdc1TuxCare:Ubuntu:18.04 |
before 2.2.7-1ubuntu2.10+tuxcare.els1 | 2.2.7-1ubuntu2.10+tuxcare.els1 |
cupsTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
cups-bsdTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
cups-clientTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
cups-commonTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
cups-core-driversTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
cups-daemonTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
cups-ipp-utilsTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
cups-ppdcTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
cups-server-commonTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
libcups2TuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
libcups2-devTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
libcupscgi1TuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
libcupscgi1-devTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
libcupsimage2TuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
libcupsimage2-devTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
libcupsmime1TuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
libcupsmime1-devTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
libcupsppdc1TuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
libcupsppdc1-devTuxCare:Ubuntu:16.04 |
before 2.1.3-4ubuntu0.11+tuxcare.els3 | 2.1.3-4ubuntu0.11+tuxcare.els3 |
cupsTuxCare:AlmaLinux:9.2 |
before 1:2.3.3op2-16.el9_2.1.tuxcare.els1 | 1:2.3.3op2-16.el9_2.1.tuxcare.els1 |
cups-clientTuxCare:AlmaLinux:9.2 |
before 1:2.3.3op2-16.el9_2.1.tuxcare.els1 | 1:2.3.3op2-16.el9_2.1.tuxcare.els1 |
cups-develTuxCare:AlmaLinux:9.2 |
before 1:2.3.3op2-16.el9_2.1.tuxcare.els1 | 1:2.3.3op2-16.el9_2.1.tuxcare.els1 |
cups-filesystemTuxCare:AlmaLinux:9.2 |
before 1:2.3.3op2-16.el9_2.1.tuxcare.els1 | 1:2.3.3op2-16.el9_2.1.tuxcare.els1 |
cups-ipptoolTuxCare:AlmaLinux:9.2 |
before 1:2.3.3op2-16.el9_2.1.tuxcare.els1 | 1:2.3.3op2-16.el9_2.1.tuxcare.els1 |
cups-libsTuxCare:AlmaLinux:9.2 |
before 1:2.3.3op2-16.el9_2.1.tuxcare.els1 | 1:2.3.3op2-16.el9_2.1.tuxcare.els1 |
cups-lpdTuxCare:AlmaLinux:9.2 |
before 1:2.3.3op2-16.el9_2.1.tuxcare.els1 | 1:2.3.3op2-16.el9_2.1.tuxcare.els1 |
cups-printerappTuxCare:AlmaLinux:9.2 |
before 1:2.3.3op2-16.el9_2.1.tuxcare.els1 | 1:2.3.3op2-16.el9_2.1.tuxcare.els1 |
cupsDebian:12 |
before 2.4.2-3+deb12u1, plus listed versions 2.4.2-3 |
2.4.2-3+deb12u1 |
cupsDebian:13 |
before 2.4.2-5 | 2.4.2-5 |
cupsDebian:14 |
before 2.4.2-5 | 2.4.2-5 |
cupsDebian:10 |
before 2.2.10-6+deb10u8, plus listed versions 2.2.10-62.2.10-6+deb10u12.2.10-6+deb10u22.2.10-6+deb10u32.2.10-6+deb10u42.2.10-6+deb10u52.2.10-6+deb10u62.2.10-6+deb10u7 |
2.2.10-6+deb10u8 |
cupsMageia:8 |
before 2.3.3op2-1.3.mga8 | 2.3.3op2-1.3.mga8 |
cupsopenEuler:20.03-LTS-SP1 |
before 2.2.13-17.oe1 | 2.2.13-17.oe1 |
cupsopenEuler:20.03-LTS-SP3 |
before 2.2.13-17.oe1 | 2.2.13-17.oe1 |
cupsopenEuler:22.03-LTS |
before 2.4.0-8.oe2203sp2 | 2.4.0-8.oe2203sp2 |
cupsopenEuler:22.03-LTS-SP1 |
before 2.4.0-8.oe2203sp1 | 2.4.0-8.oe2203sp1 |
cupsopenEuler:22.03-LTS-SP2 |
before 2.4.0-8.oe2203sp2 | 2.4.0-8.oe2203sp2 |
cupsRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-clientRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-client-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-develRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-filesystemRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-ipptoolRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-ipptool-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-libs-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-lpdRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-lpd-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-printerappRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-printerapp-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cupsRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-client-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-debugsourceRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-ipptool-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-libsRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-libs-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-lpd-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cups-printerapp-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 1:2.3.3op2-21.el9 | 1:2.3.3op2-21.el9 |
cupsRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-clientRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-client-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-develRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-filesystemRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-ipptoolRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-ipptool-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-libs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-lpdRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-lpd-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cupsRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-client-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-debugsourceRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-ipptool-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-libsRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-libs-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cups-lpd-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-54.el8_9 | 1:2.2.6-54.el8_9 |
cupsRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-clientRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-client-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-debugsourceRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-develRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-filesystemRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-ipptoolRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-ipptool-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-libs-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-lpdRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-lpd-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cupsRed Hat:rhel_eus:8.6::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-client-debuginfoRed Hat:rhel_eus:8.6::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-debuginfoRed Hat:rhel_eus:8.6::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-debugsourceRed Hat:rhel_eus:8.6::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-ipptool-debuginfoRed Hat:rhel_eus:8.6::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-libsRed Hat:rhel_eus:8.6::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-libs-debuginfoRed Hat:rhel_eus:8.6::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cups-lpd-debuginfoRed Hat:rhel_eus:8.6::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-45.el8_6.4 | 1:2.2.6-45.el8_6.4 |
cupsRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-clientRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-client-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-debugsourceRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-develRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-filesystemRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-ipptoolRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-ipptool-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-libs-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-lpdRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-lpd-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cupsRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-client-debuginfoRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-debuginfoRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-debugsourceRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-ipptool-debuginfoRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-libsRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-libs-debuginfoRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cups-lpd-debuginfoRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 1:2.2.6-51.el8_8.3 | 1:2.2.6-51.el8_8.3 |
cupsSUSE:Linux Enterprise Micro 5.3 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Micro 5.4 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Module for Basesystem 15 SP5 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Module for Desktop Applications 15 SP5 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Module for Development Tools 15 SP4 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Module for Development Tools 15 SP5 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Real Time 15 SP3 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Manager Proxy 4.2 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Manager Server 4.2 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Linux Enterprise Micro 5.2 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Enterprise Storage 7 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:Enterprise Storage 7.1 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsopenSUSE:Leap Micro 5.3 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsopenSUSE:Leap 15.4 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsopenSUSE:Leap 15.5 |
before 2.2.7-150000.3.46.1 | 2.2.7-150000.3.46.1 |
cupsSUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 1.7.5-20.46.1 | 1.7.5-20.46.1 |
cupsSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 3 CVEs |
before 1.7.5-20.46.1 | 1.7.5-20.46.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 3 CVEs |
before 1.7.5-20.46.1 | 1.7.5-20.46.1 |
cupsSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 3 CVEs |
before 1.7.5-20.46.1 | 1.7.5-20.46.1 |
cupsSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 3 CVEs |
before 1.7.5-20.46.1 | 1.7.5-20.46.1 |
cupsSUSE:Linux Enterprise Server 12 SP4-ESPOS From an advisory covering 3 CVEs |
before 1.7.5-20.46.1 | 1.7.5-20.46.1 |
cupsSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 3 CVEs |
before 1.7.5-20.46.1 | 1.7.5-20.46.1 |
cupsSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 3 CVEs |
before 1.7.5-20.46.1 | 1.7.5-20.46.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 3 CVEs |
before 1.7.5-20.46.1 | 1.7.5-20.46.1 |
cupsSUSE:Linux Micro 6.0 From an advisory covering 5 CVEs |
before 2.4.11-1.1 | 2.4.11-1.1 |
cupsUbuntu:Pro:16.04:LTS |
before 2.1.3-4ubuntu0.11+esm3, plus listed versions 2.1.0-4ubuntu32.1.0-52.1.0-62.1.0-6ubuntu12.1.0-7 Show 18 moreShow less2.1.2-12.1.2-22.1.3-12.1.3-1build12.1.3-32.1.3-42.1.3-4ubuntu0.22.1.3-4ubuntu0.32.1.3-4ubuntu0.42.1.3-4ubuntu0.52.1.3-4ubuntu0.62.1.3-4ubuntu0.72.1.3-4ubuntu0.82.1.3-4ubuntu0.92.1.3-4ubuntu0.102.1.3-4ubuntu0.112.1.3-4ubuntu0.11+esm12.1.3-4ubuntu0.11+esm2 |
2.1.3-4ubuntu0.11+esm3 |
cupsUbuntu:Pro:18.04:LTS |
before 2.2.7-1ubuntu2.10+esm1, plus listed versions 2.2.4-7ubuntu22.2.5-22.2.6-22.2.6-32.2.6-4 Show 13 moreShow less2.2.6-52.2.7-1ubuntu12.2.7-1ubuntu22.2.7-1ubuntu2.12.2.7-1ubuntu2.22.2.7-1ubuntu2.32.2.7-1ubuntu2.42.2.7-1ubuntu2.52.2.7-1ubuntu2.62.2.7-1ubuntu2.72.2.7-1ubuntu2.82.2.7-1ubuntu2.92.2.7-1ubuntu2.10 |
2.2.7-1ubuntu2.10+esm1 |
cupsUbuntu:20.04:LTS |
before 2.3.1-9ubuntu1.4, plus listed versions 2.2.12-2ubuntu12.3.0-62.3.0-72.3.0-7ubuntu12.3.1-1ubuntu1 Show 7 moreShow less2.3.1-22.3.1-42.3.1-72.3.1-9ubuntu12.3.1-9ubuntu1.12.3.1-9ubuntu1.22.3.1-9ubuntu1.3 |
2.3.1-9ubuntu1.4 |
cupsUbuntu:22.04:LTS |
before 2.4.1op1-1ubuntu4.4, plus listed versions 2.3.3op2-7ubuntu22.4.1op1-1ubuntu12.4.1op1-1ubuntu22.4.1op1-1ubuntu32.4.1op1-1ubuntu42.4.1op1-1ubuntu4.12.4.1op1-1ubuntu4.2 |
2.4.1op1-1ubuntu4.4 |
cupsopenSUSE:Tumbleweed |
before 2.4.2-6.1 | 2.4.2-6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-34241 is a medium vulnerability (CVSS 5.3) in Debian Linux, published June 22, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.38%, the 72nd percentile. Fixed in cups 2.3.3-r8.
References
github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
github.com/OpenPrinting/cups/commit/9809947a959e18409dcf562a3466ef246cb90cb2
github.com/OpenPrinting/cups/releases/tag/v2.4.6
openwall.com/lists/oss-security/2023/06/23/10
openwall.com/lists/oss-security/2023/06/26/1
lists.fedoraproject.org/archives/list/[email protected]/message/TBIYKDS3UG3W4Z7YOHTR2AWFNBRYPNYY
Show 62 moreShow less
lists.debian.org/debian-lts-announce/2023/06/msg00038.html
lists.fedoraproject.org/archives/list/[email protected]/message/7I7DWGYGEMBNLZF5UQBMF3SONR37YUBN
support.apple.com/kb/HT213843
support.apple.com/kb/HT213844
support.apple.com/kb/HT213845
security.alpinelinux.org/vuln/CVE-2023-34241
access.redhat.com/errata/RHSA-2023:6596
access.redhat.com/security/cve/CVE-2023-32324
access.redhat.com/security/cve/CVE-2023-34241
bugzilla.redhat.com/2209603
bugzilla.redhat.com/2214914
errata.almalinux.org/9/ALSA-2023-6596.html
access.redhat.com/errata/RHSA-2023:7165
errata.almalinux.org/8/ALSA-2023-7165.html
nvd.nist.gov/vuln/detail/CVE-2023-34241
docs.bell-sw.com/security/cves/CVE-2023-34241
errata.cloudlinux.com/centos8.4-els/CLSA-2023-1689008452.html
errata.cloudlinux.com/centos8.5-els/CLSA-2023-1689008977.html
errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1689258794
errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1691082968
errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1733245575.html
github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34241.json
security-tracker.debian.org/tracker/CVE-2023-34241
advisories.mageia.org/MGASA-2023-0223.html
bugs.mageia.org/show_bug.cgi?id=32040
openwall.com/lists/oss-security/2023/06/22/4
ubuntu.com/security/notices/USN-6184-1
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1410
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=2189919
bugzilla.redhat.com/show_bug.cgi?id=2209603
bugzilla.redhat.com/show_bug.cgi?id=2214914
bugzilla.redhat.com/show_bug.cgi?id=2217954
issues.redhat.com/browse/RHEL-317
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6596.json
cve.org/CVERecord?id=CVE-2023-32324
nvd.nist.gov/vuln/detail/CVE-2023-32324
cve.org/CVERecord?id=CVE-2023-34241
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=2217955
issues.redhat.com/browse/RHEL-2612
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7165.json
access.redhat.com/errata/RHSA-2024:1101
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1101.json
access.redhat.com/errata/RHSA-2024:1409
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1409.json
suse.com/support/update/announcement/2023/suse-su-20232616-1
bugzilla.suse.com/1212230
suse.com/security/cve/CVE-2023-34241
suse.com/support/update/announcement/2023/suse-su-20233706-1
bugzilla.suse.com/1214254
bugzilla.suse.com/1215204
suse.com/security/cve/CVE-2023-32360
suse.com/security/cve/CVE-2023-4504
suse.com/support/update/announcement/2025/suse-su-202520090-1
bugzilla.suse.com/1219503
bugzilla.suse.com/1225365
suse.com/security/cve/CVE-2023-32324
suse.com/security/cve/CVE-2024-35235
ubuntu.com/security/CVE-2023-34241
ubuntu.com/security/notices/USN-6184-2
Left out here: the rest of 1 source description. The JSON record has them.