cups-php vulnerabilities (Red Hat)

11 vulnerabilities.

• cups-php Red Hat Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the... CVE-2015-1159 Fix available 4.3 MediumJune 9, 2015
• cups-php Red Hat The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free... CVE-2015-1158 Public exploitFix available EPSS 29.7% 10.0 HighJune 9, 2015
• cups-php Red Hat Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2... CVE-2014-9679 Fix available 6.8 MediumJuly 29, 2014
• cups-php Red Hat The web interface in CUPS before 2.0 does not check that files have world-readable permissions,... CVE-2014-5031 Fix available 5.0 MediumJuly 27, 2014
• cups-php Red Hat CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html... CVE-2014-5030 Fix available 1.9 LowJuly 27, 2014
• cups-php Red Hat The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a... CVE-2014-5029 Fix available 1.5 LowJuly 27, 2014
• cups-php Red Hat The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files... CVE-2014-3537 Fix available 1.2 LowJuly 17, 2014
• cups-php Red Hat Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System ... CVE-2014-2856 Fix available 4.3 MediumApril 18, 2014
• cups-php Red Hat CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web... CVE-2012-5519 Public exploitFix available 7.2 HighNovember 20, 2012
• cups-php Red Hat The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in... CVE-2011-2896 Fix available EPSS 12.0% 5.1 MediumAugust 19, 2011
• cups-php Red Hat ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values... CVE-2010-2941 Fix available 9.8 CriticalNovember 5, 2010