cups vulnerabilities (Alpine)

23 vulnerabilities.

• cups Alpine CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer CVE-2026-39316 Fix available 4.0 MediumApril 7, 2026
• cups Alpine CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported` CVE-2026-39314 Fix available 4.0 MediumApril 7, 2026
• cups Alpine OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network CVE-2026-34980 Public exploitFix available 6.1 MediumApril 3, 2026
• cups Alpine OpenPrinting CUPS: Heap overflow in `get_options()` CVE-2026-34979 Fix available 5.3 MediumApril 3, 2026
• cups Alpine OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache) CVE-2026-34978 Fix available 6.5 MediumApril 3, 2026
• cups Alpine OpenPrinting CUPS: Local print admin token disclosure using temporary printers CVE-2026-34990 Public exploitFix available 5.0 MediumApril 3, 2026
• cups Alpine OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup CVE-2026-27447 Fix available 4.8 MediumApril 3, 2026
• cups Alpine OpenPrinting CUPS vulnerable to stack based out-of-bound write CVE-2025-61915 Fix available 6.0 MediumNovember 27, 2025
• cups Alpine OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack CVE-2025-58436 Fix available 5.1 MediumNovember 27, 2025
• cups Alpine cups: Remote DoS via null dereference CVE-2025-58364 Fix available 6.5 MediumSeptember 11, 2025
• cups Alpine cups has Authentication bypass with AuthType Negotiate CVE-2025-58060 Public exploitFix available 8.0 HighSeptember 11, 2025
• cups Alpine libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer CVE-2024-47175 Public exploitFix available EPSS 63.6% 8.6 HighSeptember 26, 2024
• cups Alpine Cupsd Listen arbitrary chmod 0140777 CVE-2024-35235 Fix available 4.4 MediumJune 11, 2024
• cups Alpine OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow CVE-2023-4504 Public exploitFix available 7.0 HighSeptember 20, 2023
• cups Alpine CUPS vulnerable to use-after-free in cupsdAcceptClient() CVE-2023-34241 Fix available 5.3 MediumJune 22, 2023
• cups Alpine OpenPrinting CUPS vulnerable to heap buffer overflow CVE-2023-32324 Fix available 7.5 HighJune 1, 2023
• cups Alpine A logic issue was addressed with improved state management. This issue is fixed in Security... CVE-2022-26691 Fix available 6.7 MediumMay 26, 2022
• cups Alpine A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS... CVE-2019-8842 Fix available 3.3 LowJune 7, 2020
• cups Alpine A memory corruption issue was addressed with improved validation. This issue is fixed in macOS... CVE-2020-3898 Fix available 7.8 HighApril 21, 2020
• cups Alpine A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS... CVE-2019-8696 Fix available 8.8 HighAugust 14, 2019
• cups Alpine A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS... CVE-2019-8675 Fix available 8.8 HighAugust 14, 2019
• cups Alpine Red Hat Security Advisory: cups security and bug fix update CVE-2018-4700 Fix availableRejected 7.3 HighDecember 7, 2018
• cups Alpine A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2... CVE-2017-18190 Fix available 7.5 HighFebruary 16, 2018