{"id":"CVE-2019-8842","aliases":["ALPINE-CVE-2019-8842","BELL-CVE-2019-8842","DEBIAN-CVE-2019-8842","DLA-2237-1","EUVD-2019-18232","GHSA-3fhw-2p9h-rjgc","MGASA-2020-0248","OESA-2022-1850","SUSE-SU-2021:0285-1","SUSE-SU-2021:0286-1","UBUNTU-CVE-2019-8842","USN-5454-1","USN-5454-2","openSUSE-SU-2021:0253-1","openSUSE-SU-2024:10707-1"],"status":"published","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS...","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02031,"percentile":0.81188,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2020-06-07T00:00:00Z","modified":"2026-09-21T07:03:25Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"cups","fixed_in":["2.2.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"cups","fixed_in":["2.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"cups","fixed_in":["2.2.12-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"cups","fixed_in":["2.3.1-12"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cups","fixed_in":["2.3.1-12"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cups","fixed_in":["2.3.1-12"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"cups","fixed_in":["2.2.13-11.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"cups","fixed_in":["2.2.13-13.oe1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cups","fixed_in":["2.1.3-4ubuntu0.11+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"cups","fixed_in":["2.2.7-1ubuntu2.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"cups","fixed_in":["2.3.1-9ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-11+deb8u8"}]}],"versions":["1.7.5-11","1.7.5-11+deb8u1","1.7.5-11+deb8u2","1.7.5-11+deb8u3","1.7.5-11+deb8u4","1.7.5-11+deb8u5","1.7.5-11+deb8u6","1.7.5-11+deb8u7"],"bundled":2},{"source":"osv","ecosystem":"Mageia:7","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.13-1.2.mga7"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.13-11.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.13-13.oe1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.33.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.33.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.33.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-4ubuntu0.11+esm1"}]}],"versions":["2.1.0-4ubuntu3","2.1.0-5","2.1.0-6","2.1.0-6ubuntu1","2.1.0-7","2.1.2-1","2.1.2-2","2.1.3-1","2.1.3-1build1","2.1.3-3","2.1.3-4","2.1.3-4ubuntu0.2","2.1.3-4ubuntu0.3","2.1.3-4ubuntu0.4","2.1.3-4ubuntu0.5","2.1.3-4ubuntu0.6","2.1.3-4ubuntu0.7","2.1.3-4ubuntu0.8","2.1.3-4ubuntu0.9","2.1.3-4ubuntu0.10","2.1.3-4ubuntu0.11"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-1ubuntu2.9"}]}],"versions":["2.2.4-7ubuntu2","2.2.5-2","2.2.6-2","2.2.6-3","2.2.6-4","2.2.6-5","2.2.7-1ubuntu1","2.2.7-1ubuntu2","2.2.7-1ubuntu2.1","2.2.7-1ubuntu2.2","2.2.7-1ubuntu2.3","2.2.7-1ubuntu2.4","2.2.7-1ubuntu2.5","2.2.7-1ubuntu2.6","2.2.7-1ubuntu2.7","2.2.7-1ubuntu2.8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-9ubuntu1.2"}]}],"versions":["2.2.12-2ubuntu1","2.3.0-6","2.3.0-7","2.3.0-7ubuntu1","2.3.1-1ubuntu1","2.3.1-2","2.3.1-4","2.3.1-7","2.3.1-9ubuntu1","2.3.1-9ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-1ubuntu2.9"}]}],"versions":["2.2.4-7ubuntu2","2.2.5-2","2.2.6-2","2.2.6-3","2.2.6-4","2.2.6-5","2.2.7-1ubuntu1","2.2.7-1ubuntu2","2.2.7-1ubuntu2.1","2.2.7-1ubuntu2.2","2.2.7-1ubuntu2.3","2.2.7-1ubuntu2.4","2.2.7-1ubuntu2.5","2.2.7-1ubuntu2.6","2.2.7-1ubuntu2.7","2.2.7-1ubuntu2.8"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-9ubuntu1.2"}]}],"versions":["2.2.12-2ubuntu1","2.3.0-6","2.3.0-7","2.3.0-7ubuntu1","2.3.1-1ubuntu1","2.3.1-2","2.3.1-4","2.3.1-7","2.3.1-9ubuntu1","2.3.1-9ubuntu1.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1op1-1ubuntu4.1"}]}],"versions":["2.3.3op2-7ubuntu2","2.4.1op1-1ubuntu1","2.4.1op1-1ubuntu2","2.4.1op1-1ubuntu3","2.4.1op1-1ubuntu4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-4ubuntu0.11+esm1"}]}],"versions":["2.1.0-4ubuntu3","2.1.0-5","2.1.0-6","2.1.0-6ubuntu1","2.1.0-7","2.1.2-1","2.1.2-2","2.1.3-1","2.1.3-1build1","2.1.3-3","2.1.3-4","2.1.3-4ubuntu0.2","2.1.3-4ubuntu0.3","2.1.3-4ubuntu0.4","2.1.3-4ubuntu0.5","2.1.3-4ubuntu0.6","2.1.3-4ubuntu0.7","2.1.3-4ubuntu0.8","2.1.3-4ubuntu0.9","2.1.3-4ubuntu0.10","2.1.3-4ubuntu0.11"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-lp152.9.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3op2-4.2"}]}],"bundled":20}],"products":[{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/en-us/HT210788","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-8842","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-3fhw-2p9h-rjgc"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-8842","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-8842","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-8842","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0248.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26531","tags":["report"]},{"url":"https://usn.ubuntu.com/4105-1/","tags":["web"]},{"url":"https://usn.ubuntu.com/4340-1/","tags":["web"]},{"url":"https://github.com/apple/cups/releases/tag/v2.2.12","tags":["web"]},{"url":"https://github.com/apple/cups/releases/tag/v2.2.13","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1850","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210285-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1170671","tags":["report"]},{"url":"https://bugzilla.suse.com/1180520","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10001","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210286-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-8842","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5454-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5454-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-8842","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-26691","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EYJFJX2GGKH4VAMYMTSR5TZZO2F2HPHC/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25317","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-8842","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.","status":"published","published":"2020-10-27T19:55:33Z","modified":"2024-08-04T21:31:37.47Z","updated_at":"2026-11-02T14:20:21.703364Z"}],"euvd":[{"id":"EUVD-2019-18232","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.","status":"published","published":"2020-10-27T19:55:33Z","modified":"2024-08-04T21:31:37Z","updated_at":"2026-11-03T03:06:40.999783Z"}],"ghsa":[{"id":"GHSA-3fhw-2p9h-rjgc","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS...","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.","status":"published","published":"2022-05-24T17:32:27Z","modified":"2023-01-29T05:05:08Z","cwes":["CWE-120"],"updated_at":"2026-11-02T14:45:43.003111Z"}],"nvd":[{"id":"CVE-2019-8842","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.","status":"published","published":"2020-10-27T20:15:21.173Z","modified":"2026-06-17T02:42:42.907Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:05:48.502374Z"}],"osv":[{"id":"ALPINE-CVE-2019-8842","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.","status":"published","published":"2020-10-27T20:15:21.173Z","modified":"2026-09-21T06:17:52.550336908Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2019-8842","title":"CVE-2019-8842 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:21.869007Z","modified":"2026-01-26T09:47:30.273491Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-8842","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.","status":"published","published":"2020-10-27T20:15:21.173Z","modified":"2026-04-16T04:34:33.068449335Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:12.974481Z"},{"id":"DEBIAN-CVE-2019-8842","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.","status":"published","published":"2020-10-27T20:15:21.173Z","modified":"2026-09-21T07:03:25.016029978Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:32.57265Z"},{"id":"OESA-2022-1850","title":"cups security update","description":"CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.\r\n\r\nSecurity Fix(es):\r\n\r\nA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.(CVE-2019-8842)","status":"published","published":"2022-08-19T11:05:07Z","modified":"2026-08-18T01:17:06.346480085Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2019-8842","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs.","status":"published","published":"2020-10-27T20:15:00Z","modified":"2026-04-22T12:23:17.527399Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"DLA-2237-1","title":"cups - security update","status":"published","published":"2020-06-07T00:00:00Z","modified":"2026-03-09T01:21:40.637773Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"MGASA-2020-0248","title":"Updated cups packages fix security vulnerability","description":"Updated cups packages fix security vulnerabilities:\n\nIt was discovered that CUPS incorrectly handled certain language values.\nA local attacker could possibly use this issue to cause CUPS to crash,\nleading to a denial of service, or possibly obtain sensitive information\n(CVE-2019-2228).\n\nStephan Zeisberg discovered that the CUPS SNMP backend incorrectly\nhandled encoded ASN.1 inputs. A remote attacker could possibly use this\nissue to cause CUPS to crash by providing specially crafted network\ntraffic (CVE-2019-8675, CVE-2019-8696).\n\nThe ippReadIO function may under-read an extension (CVE-2019-8842).\n\nStephan Zeisberg discovered that CUPS incorrectly handled certain\nmalformed ppd files. A local attacker could possibly use this issue to\nexecute arbitrary code (CVE-2020-3898).\n\nThe cups package has been updated to version 2.2.13 and patched to fix\nthese issues and other bugs.\n\nAlso, this update will hopefully fix the cups service failing to start at\nboot on some systems. \n","status":"published","published":"2020-06-10T22:26:12Z","modified":"2026-04-16T04:44:26.010940877Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2021:0253-1","title":"Security update for cups","description":"This update for cups fixes the following issues:\n\n- CVE-2020-10001: Fixed an out-of-bounds read in the ippReadIO function (bsc#1180520).\n- CVE-2019-8842: Fixed an out-of-bounds read in an extension field (bsc#1170671).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-02-05T19:04:57Z","modified":"2026-02-04T02:25:39.881876Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:10707-1","title":"cups-2.3.3op2-4.2 on GA media","description":"These are all security issues fixed in the cups-2.3.3op2-4.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:24:44.838396Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2021:0285-1","title":"Security update for cups","description":"This update for cups fixes the following issues:\n\n- CVE-2020-10001: Fixed an out-of-bounds read in the ippReadIO function (bsc#1180520).\n- CVE-2019-8842: Fixed an out-of-bounds read in an extension field (bsc#1170671).\n","status":"published","published":"2021-02-02T12:09:05Z","modified":"2026-02-04T04:18:16.07846Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0286-1","title":"Security update for cups","description":"This update for cups fixes the following issues:\n\n- CVE-2020-10001: Fixed an out-of-bounds read in the ippReadIO function (bsc#1180520).\n- CVE-2019-8842: Fixed an out-of-bounds read in an extension field (bsc#1170671).\n","status":"published","published":"2021-02-02T12:09:38Z","modified":"2026-02-04T03:59:44.282139Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-5454-1","title":"cups vulnerabilities","description":"Joshua Mason discovered that CUPS incorrectly handled the secret key used\nto access the administrative web interface. A remote attacker could\npossibly use this issue to open a session as an administrator and execute\narbitrary code. (CVE-2022-26691)\n\nIt was discovered that CUPS incorrectly handled certain memory operations\nwhen handling IPP printing. A remote attacker could possibly use this issue\nto cause CUPS to crash, leading to a denial of service, or obtain sensitive\ninformation. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04\nLTS.  (CVE-2019-8842, CVE-2020-10001)\n","status":"published","published":"2022-05-31T11:29:49Z","modified":"2026-04-22T10:24:12.906371Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5454-2","title":"cups vulnerabilities","description":"USN-5454-1 fixed several vulnerabilities in CUPS. This update provides\nthe corresponding update for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n Joshua Mason discovered that CUPS incorrectly handled the secret key used\n to access the administrative web interface. A remote attacker could\n possibly use this issue to open a session as an administrator and execute\n arbitrary code. (CVE-2022-26691)\n\n It was discovered that CUPS incorrectly handled certain memory operations\n when handling IPP printing. A remote attacker could possibly use this issue\n to cause CUPS to crash, leading to a denial of service, or obtain sensitive\n information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04\n LTS.  (CVE-2019-8842, CVE-2020-10001)\n","status":"published","published":"2022-05-31T19:35:26Z","modified":"2026-06-25T13:31:10.010476292Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}