{"id":"CVE-2020-3898","aliases":["ALPINE-CVE-2020-3898","BELL-CVE-2020-3898","DEBIAN-CVE-2020-3898","DLA-2237-1","EUVD-2020-25163","GHSA-82r2-pfjv-q743","MGASA-2020-0248","RHSA-2020:4469","RLSA-2020:4469","SUSE-SU-2020:1045-1","SUSE-SU-2020:1083-1","SUSE-SU-2020:14341-1","UBUNTU-CVE-2020-3898","USN-4340-1","openSUSE-SU-2020:0555-1","openSUSE-SU-2024:10707-1"],"status":"published","title":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS...","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00391,"percentile":0.3354,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-20","CWE-787"],"published":"2020-04-21T00:00:00Z","modified":"2026-10-26T12:01:52Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"cups","fixed_in":["2.2.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"cups","fixed_in":["2.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"cups","fixed_in":["2.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"cups","fixed_in":["2.2.12-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"cups","fixed_in":["2.3.1-12"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cups","fixed_in":["2.3.1-12"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cups","fixed_in":["2.3.1-12"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-client","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-client-debuginfo","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-debuginfo","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-debugsource","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-devel","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-filesystem","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-ipptool","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-ipptool-debuginfo","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-libs-debuginfo","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-lpd","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-lpd-debuginfo","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-client-debuginfo","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-debuginfo","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-debugsource","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-ipptool-debuginfo","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-libs","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-libs-debuginfo","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-lpd-debuginfo","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"cups","fixed_in":["1:2.2.6-38.el8"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"cups","fixed_in":["1.7.5-20.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"cups","fixed_in":["2.2.7-3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"cups","fixed_in":["2.2.7-3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"cups","fixed_in":["2.2.7-3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"cups","fixed_in":["2.2.7-3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"cups","fixed_in":["2.2.7-3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"cups","fixed_in":["2.2.7-3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"cups","fixed_in":["1.3.9-8.46.56.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"cups","fixed_in":["1.3.9-8.46.56.11.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"cups","fixed_in":["2.1.3-4ubuntu0.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"cups","fixed_in":["2.2.7-1ubuntu2.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"cups","fixed_in":["2.3.1-9ubuntu1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"cups","fixed_in":["2.2.7-lp151.6.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-11+deb8u8"}]}],"versions":["1.7.5-11","1.7.5-11+deb8u1","1.7.5-11+deb8u2","1.7.5-11+deb8u3","1.7.5-11+deb8u4","1.7.5-11+deb8u5","1.7.5-11+deb8u6","1.7.5-11+deb8u7"],"bundled":2},{"source":"osv","ecosystem":"Mageia:7","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.13-1.2.mga7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-ipptool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-ipptool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-lpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cups-lpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-ipptool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cups-lpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-38.el8"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-8.46.56.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-8.46.56.11.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-4ubuntu0.11"}]}],"versions":["2.1.0-4ubuntu3","2.1.0-5","2.1.0-6","2.1.0-6ubuntu1","2.1.0-7","2.1.2-1","2.1.2-2","2.1.3-1","2.1.3-1build1","2.1.3-3","2.1.3-4","2.1.3-4ubuntu0.2","2.1.3-4ubuntu0.3","2.1.3-4ubuntu0.4","2.1.3-4ubuntu0.5","2.1.3-4ubuntu0.6","2.1.3-4ubuntu0.7","2.1.3-4ubuntu0.8","2.1.3-4ubuntu0.9","2.1.3-4ubuntu0.10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-1ubuntu2.8"}]}],"versions":["2.2.4-7ubuntu2","2.2.5-2","2.2.6-2","2.2.6-3","2.2.6-4","2.2.6-5","2.2.7-1ubuntu1","2.2.7-1ubuntu2","2.2.7-1ubuntu2.1","2.2.7-1ubuntu2.2","2.2.7-1ubuntu2.3","2.2.7-1ubuntu2.4","2.2.7-1ubuntu2.5","2.2.7-1ubuntu2.6","2.2.7-1ubuntu2.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-9ubuntu1.1"}]}],"versions":["2.2.12-2ubuntu1","2.3.0-6","2.3.0-7","2.3.0-7ubuntu1","2.3.1-1ubuntu1","2.3.1-2","2.3.1-4","2.3.1-7","2.3.1-9ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-4ubuntu0.11"}]}],"versions":["2.1.0-4ubuntu3","2.1.0-5","2.1.0-6","2.1.0-6ubuntu1","2.1.0-7","2.1.2-1","2.1.2-2","2.1.3-1","2.1.3-1build1","2.1.3-3","2.1.3-4","2.1.3-4ubuntu0.2","2.1.3-4ubuntu0.3","2.1.3-4ubuntu0.4","2.1.3-4ubuntu0.5","2.1.3-4ubuntu0.6","2.1.3-4ubuntu0.7","2.1.3-4ubuntu0.8","2.1.3-4ubuntu0.9","2.1.3-4ubuntu0.10"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-1ubuntu2.8"}]}],"versions":["2.2.4-7ubuntu2","2.2.5-2","2.2.6-2","2.2.6-3","2.2.6-4","2.2.6-5","2.2.7-1ubuntu1","2.2.7-1ubuntu2","2.2.7-1ubuntu2.1","2.2.7-1ubuntu2.2","2.2.7-1ubuntu2.3","2.2.7-1ubuntu2.4","2.2.7-1ubuntu2.5","2.2.7-1ubuntu2.6","2.2.7-1ubuntu2.7"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-9ubuntu1.1"}]}],"versions":["2.2.12-2ubuntu1","2.3.0-6","2.3.0-7","2.3.0-7ubuntu1","2.3.1-1ubuntu1","2.3.1-2","2.3.1-4","2.3.1-7","2.3.1-9ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-lp151.6.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3op2-4.2"}]}],"bundled":20}],"products":[{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/kb/HT211100","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-3898","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-82r2-pfjv-q743"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-3898","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-3898","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-3898","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0248.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26531","tags":["report"]},{"url":"https://usn.ubuntu.com/4105-1/","tags":["web"]},{"url":"https://usn.ubuntu.com/4340-1/","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-8842","tags":["advisory"]},{"url":"https://github.com/apple/cups/releases/tag/v2.2.12","tags":["web"]},{"url":"https://github.com/apple/cups/releases/tag/v2.2.13","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4469","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1689207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1775590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1784884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1822135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1838449","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4469.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-3898","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-3898","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2020:4469","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201045-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1168422","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3898","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201083-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014341-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-3898","tags":["report"]},{"url":"https://support.apple.com/en-us/HT211100","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4340-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-2228","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CMJPHSRBP6L3N452VSAWIU4E4IEMNKZ3/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25317","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-3898","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.","status":"published","published":"2020-10-22T17:48:29Z","modified":"2024-08-04T07:52:19.824Z","updated_at":"2026-11-02T14:35:52.268457Z"}],"euvd":[{"id":"EUVD-2020-25163","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.","status":"published","published":"2020-10-22T17:48:29Z","modified":"2024-08-04T07:52:19Z","updated_at":"2026-11-03T03:08:08.458165Z"}],"ghsa":[{"id":"GHSA-82r2-pfjv-q743","title":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS...","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.","status":"published","published":"2022-05-24T17:32:02Z","modified":"2023-01-29T05:04:28Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:45:33.67375Z"}],"nvd":[{"id":"CVE-2020-3898","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.","status":"published","published":"2020-10-22T18:15:12.893Z","modified":"2026-06-17T03:19:13.487Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20","CWE-787"],"updated_at":"2026-11-02T14:06:20.704992Z"}],"osv":[{"id":"ALPINE-CVE-2020-3898","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.","status":"published","published":"2020-10-22T18:15:12.893Z","modified":"2026-10-26T11:17:55.176018539Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2020-3898","title":"CVE-2020-3898 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:25.205579Z","modified":"2026-01-26T09:46:15.702975Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-3898","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.","status":"published","published":"2020-10-22T18:15:12.893Z","modified":"2026-04-16T04:40:16.868382945Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:16.936975Z"},{"id":"DEBIAN-CVE-2020-3898","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.","status":"published","published":"2020-10-22T18:15:12.893Z","modified":"2026-10-26T12:01:52.939234457Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.019707Z"},{"id":"RHSA-2020:4469","title":"Red Hat Security Advisory: cups security and bug fix update","status":"published","published":"2024-09-16T04:03:42Z","modified":"2026-06-26T12:22:08.919296549Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RLSA-2020:4469","title":"Low: cups security and bug fix update","description":"The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.\n\nSecurity Fix(es):\n\n* cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c (CVE-2020-3898)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:07:34Z","modified":"2026-02-04T22:45:10.225567Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-3898","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.","status":"published","published":"2020-04-21T00:00:00Z","modified":"2026-04-22T12:42:23.735949Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:25.179924Z"},{"id":"DLA-2237-1","title":"cups - security update","status":"published","published":"2020-06-07T00:00:00Z","modified":"2026-03-09T01:21:40.637773Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"MGASA-2020-0248","title":"Updated cups packages fix security vulnerability","description":"Updated cups packages fix security vulnerabilities:\n\nIt was discovered that CUPS incorrectly handled certain language values.\nA local attacker could possibly use this issue to cause CUPS to crash,\nleading to a denial of service, or possibly obtain sensitive information\n(CVE-2019-2228).\n\nStephan Zeisberg discovered that the CUPS SNMP backend incorrectly\nhandled encoded ASN.1 inputs. A remote attacker could possibly use this\nissue to cause CUPS to crash by providing specially crafted network\ntraffic (CVE-2019-8675, CVE-2019-8696).\n\nThe ippReadIO function may under-read an extension (CVE-2019-8842).\n\nStephan Zeisberg discovered that CUPS incorrectly handled certain\nmalformed ppd files. A local attacker could possibly use this issue to\nexecute arbitrary code (CVE-2020-3898).\n\nThe cups package has been updated to version 2.2.13 and patched to fix\nthese issues and other bugs.\n\nAlso, this update will hopefully fix the cups service failing to start at\nboot on some systems. \n","status":"published","published":"2020-06-10T22:26:12Z","modified":"2026-04-16T04:44:26.010940877Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0555-1","title":"Security update for cups","description":"This update for cups fixes the following issues:\n\n- CVE-2020-3898: Fixed a heap buffer overflow in ppdFindOption() (bsc#1168422).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-04-26T14:12:35Z","modified":"2026-02-04T04:28:57.990028Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10707-1","title":"cups-2.3.3op2-4.2 on GA media","description":"These are all security issues fixed in the cups-2.3.3op2-4.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:24:44.838396Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:1045-1","title":"Security update for cups","description":"This update for cups fixes the following issues:\n\n- CVE-2020-3898: Fixed a heap buffer overflow in ppdFindOption() (bsc#1168422).\n","status":"published","published":"2020-04-23T09:33:41Z","modified":"2026-02-04T03:33:22.01247Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1083-1","title":"Security update for cups","description":"This update for cups fixes the following issues:\n\n- CVE-2020-3898: Fixed a heap buffer overflow in ppdFindOption() (bsc#1168422).\n","status":"published","published":"2020-04-23T09:31:58Z","modified":"2026-02-04T03:30:49.352209Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:14341-1","title":"Security update for cups","description":"This update for cups fixes the following issues:\n\n- CVE-2020-3898: Fixed heap buffer overflow in libcups ppdFindOption() function (bsc#1168422).\n","status":"published","published":"2020-04-23T09:31:30Z","modified":"2026-02-04T02:39:59.249017Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4340-1","title":"cups vulnerabilities","description":"It was discovered that CUPS incorrectly handled certain language values. A\nlocal attacker could possibly use this issue to cause CUPS to crash,\nleading to a denial of service, or possibly obtain sensitive information.\nThis issue only applied to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu\n19.10. (CVE-2019-2228)\n\nStephan Zeisberg discovered that CUPS incorrectly handled certain malformed\nppd files. A local attacker could possibly use this issue to execute\narbitrary code. (CVE-2020-3898)\n","status":"published","published":"2020-04-27T15:18:48Z","modified":"2026-04-22T10:05:06.390484Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}