{"id":"CVE-2018-4700","aliases":["ALPINE-CVE-2018-4700","EUVD-2018-16486","RHSA-2020:1050","SUSE-SU-2018:4059-1","SUSE-SU-2018:4089-1","UBUNTU-CVE-2018-4700","USN-3842-1","openSUSE-SU-2024:10707-1"],"status":"rejected","title":"Red Hat Security Advisory: cups security and bug fix update","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","severity":{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high","from":"osv"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-12-07T00:00:00Z","modified":"2026-10-23T17:17:55Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"cups","fixed_in":["2.2.10-r0"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"cups","fixed_in":["2.2.7-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"cups","fixed_in":["2.2.7-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"cups","fixed_in":["2.2.7-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"cups","fixed_in":["1.7.5-20.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"cups","fixed_in":["1.7.5-20.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"cups","fixed_in":["1.7.5-20.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"cups","fixed_in":["1.7.5-20.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"cups","fixed_in":["1.7.5-20.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"cups","fixed_in":["1.7.5-20.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"cups","fixed_in":["1.7.5-20.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"cups","fixed_in":["1.7.5-20.20.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"cups","fixed_in":["1.7.2-0ubuntu1.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"cups","fixed_in":["2.1.3-4ubuntu0.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"cups","fixed_in":["2.2.7-1ubuntu2.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-r0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"cups-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"cups-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"cups-lpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"cups-ipptool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cups-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cups-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cups-lpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cups-ipptool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"cups-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"cups-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"cups-lpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"cups-ipptool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cups-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cups-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cups-lpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cups-ipptool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-43.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.20.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2-0ubuntu1.11"}]}],"versions":["1.7.0~rc1-0ubuntu5","1.7.0-0ubuntu2","1.7.0-0ubuntu3","1.7.0-1","1.7.0-2","1.7.1-1","1.7.1-2","1.7.1-2git1","1.7.1-3","1.7.1-4","1.7.1-4ubuntu1","1.7.1-5ubuntu1","1.7.1-5ubuntu3","1.7.1-5ubuntu4","1.7.1-5ubuntu5","1.7.1-5ubuntu6","1.7.1-5ubuntu7","1.7.1-5ubuntu8","1.7.1-5ubuntu9","1.7.1-5ubuntu10","1.7.2-0ubuntu1","1.7.2-0ubuntu1.1","1.7.2-0ubuntu1.2","1.7.2-0ubuntu1.4","1.7.2-0ubuntu1.5","1.7.2-0ubuntu1.6","1.7.2-0ubuntu1.7","1.7.2-0ubuntu1.8","1.7.2-0ubuntu1.9","1.7.2-0ubuntu1.10"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-4ubuntu0.6"}]}],"versions":["2.1.0-4ubuntu3","2.1.0-5","2.1.0-6","2.1.0-6ubuntu1","2.1.0-7","2.1.2-1","2.1.2-2","2.1.3-1","2.1.3-1build1","2.1.3-3","2.1.3-4","2.1.3-4ubuntu0.2","2.1.3-4ubuntu0.3","2.1.3-4ubuntu0.4","2.1.3-4ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-1ubuntu2.2"}]}],"versions":["2.2.4-7ubuntu2","2.2.5-2","2.2.6-2","2.2.6-3","2.2.6-4","2.2.6-5","2.2.7-1ubuntu1","2.2.7-1ubuntu2","2.2.7-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2-0ubuntu1.11"}]}],"versions":["1.7.0~rc1-0ubuntu5","1.7.0-0ubuntu2","1.7.0-0ubuntu3","1.7.0-1","1.7.0-2","1.7.1-1","1.7.1-2","1.7.1-2git1","1.7.1-3","1.7.1-4","1.7.1-4ubuntu1","1.7.1-5ubuntu1","1.7.1-5ubuntu3","1.7.1-5ubuntu4","1.7.1-5ubuntu5","1.7.1-5ubuntu6","1.7.1-5ubuntu7","1.7.1-5ubuntu8","1.7.1-5ubuntu9","1.7.1-5ubuntu10","1.7.2-0ubuntu1","1.7.2-0ubuntu1.1","1.7.2-0ubuntu1.2","1.7.2-0ubuntu1.4","1.7.2-0ubuntu1.5","1.7.2-0ubuntu1.6","1.7.2-0ubuntu1.7","1.7.2-0ubuntu1.8","1.7.2-0ubuntu1.9","1.7.2-0ubuntu1.10"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-4ubuntu0.6"}]}],"versions":["2.1.0-4ubuntu3","2.1.0-5","2.1.0-6","2.1.0-6ubuntu1","2.1.0-7","2.1.2-1","2.1.2-2","2.1.3-1","2.1.3-1build1","2.1.3-3","2.1.3-4","2.1.3-4ubuntu0.2","2.1.3-4ubuntu0.3","2.1.3-4ubuntu0.4","2.1.3-4ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-1ubuntu2.2"}]}],"versions":["2.2.4-7ubuntu2","2.2.5-2","2.2.6-2","2.2.6-3","2.2.6-4","2.2.6-5","2.2.7-1ubuntu1","2.2.7-1ubuntu2","2.2.7-1ubuntu2.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3op2-4.2"}]}],"bundled":20}],"references":[{"url":"https://security.alpinelinux.org/vuln/CVE-2018-4700","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1050","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649347","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1050.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-4180","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-4180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4180","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-4181","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-4181","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4181","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-4300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695929","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-4300","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4300","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-4700","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-4700","tags":["advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4700","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20184059-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1115750","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4700","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20184089-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-4700","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3842-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25317","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-4700","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2019-08-05T18:02:41Z","modified":"2019-08-05T18:02:41Z","updated_at":"2026-11-02T14:35:08.024147Z"}],"euvd":[{"id":"EUVD-2018-16486","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2019-08-05T18:02:41Z","modified":"2019-08-05T18:02:41Z","updated_at":"2026-11-03T03:51:29.418182Z"}],"nvd":[{"id":"CVE-2018-4700","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2019-08-05T19:15:11.053Z","modified":"2023-11-07T02:58:32.24Z","updated_at":"2026-11-02T14:04:59.278647Z"}],"osv":[{"id":"RHSA-2020:1050","title":"Red Hat Security Advisory: cups security and bug fix update","status":"published","published":"2024-09-16T02:48:48Z","modified":"2026-06-26T12:21:10.232144711Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"ALPINE-CVE-2018-4700","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2019-08-05T19:15:11.053Z","modified":"2026-10-23T17:17:55.269757388Z","updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"CVE-2018-4700","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2019-08-05T19:15:11Z","modified":"2026-04-10T04:08:01.67611Z","updated_at":"2026-11-02T15:44:09.442568Z"},{"id":"openSUSE-SU-2024:10707-1","title":"cups-2.3.3op2-4.2 on GA media","description":"These are all security issues fixed in the cups-2.3.3op2-4.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:24:44.838396Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2018:4059-1","title":"Security update for cups","description":"This update for cups fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-4700: Fixed extremely predictable cookie generation that is effectively breaking the CSRF protection of the CUPS web interface (bsc#1115750).\n","status":"published","published":"2018-12-10T07:07:50Z","modified":"2026-02-04T03:37:39.773605Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:4089-1","title":"Security update for cups","description":"This update for cups fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-4700: Fixed extremely predictable cookie generation that is effectively breaking the CSRF protection of the CUPS web interface (bsc#1115750).\n","status":"published","published":"2018-12-12T15:05:55Z","modified":"2026-02-04T03:25:57.40768Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"UBUNTU-CVE-2018-4700","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2018-12-07T00:00:00Z","modified":"2026-04-22T11:56:20.711219Z","updated_at":"2026-11-02T15:54:18.33562Z"},{"id":"USN-3842-1","title":"cups vulnerability","description":"Jann Horn discovered that CUPS incorrectly handled session cookie\nrandomness. A remote attacker could possibly use this issue to perform\ncross-site request forgery (CSRF) attacks.\n","status":"published","published":"2018-12-10T16:15:51Z","modified":"2026-04-22T09:53:11.399249Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}