cups-printerapp vulnerabilities (Red Hat)
32 vulnerabilities.
-
cups-printerappRed Hat Cups: null pointer dereference via embedded job ticket comments allows remote denial of service 4.0 Medium -
cups-printerappRed Hat OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group... 3.3 Low -
cups-printerappRed Hat OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a... 5.1 Medium -
cups-printerappRed Hat OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add... 2.3 Low -
cups-printerappRed Hat OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission... 3.3 Low -
cups-printerappRed Hat CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix) 2.5 Low -
cups-printerappRed Hat OpenPrinting CUPS: root-side banner file disclosure 5.3 Medium -
cups-printerappRed Hat CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root) 5.7 Medium -
cups-printerappRed Hat CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip 3.3 Low -
cups-printerappRed Hat Cups: cups: argument injection in mailto notifier via notify-recipient-uri 2.5 Low -
cups-printerappRed Hat Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up) 3.0 Low -
cups-printerappRed Hat Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound 4.3 Medium -
cups-printerappRed Hat CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer 4.0 Medium -
cups-printerappRed Hat CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported` 4.0 Medium -
cups-printerappRed Hat OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network 6.1 Medium -
cups-printerappRed Hat OpenPrinting CUPS: Heap overflow in `get_options()` 5.3 Medium -
cups-printerappRed Hat OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache) 6.5 Medium -
cups-printerappRed Hat OpenPrinting CUPS: Local print admin token disclosure using temporary printers 5.0 Medium -
cups-printerappRed Hat OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup 4.8 Medium -
cups-printerappRed Hat OpenPrinting CUPS vulnerable to stack based out-of-bound write 6.0 Medium -
cups-printerappRed Hat OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack 5.1 Medium -
cups-printerappRed Hat [BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftoraster 4.0 Medium -
cups-printerappRed Hat [BIGSLEEP-434612419] CUPS-Filters has heap-buffer-overflow write in `cfImageLut()` 3.7 Low -
cups-printerappRed Hat Unbounded allocation when parsing GNU sparse map in archive/tar 4.3 Medium -
cups-printerappRed Hat cups: Remote DoS via null dereference 6.5 Medium -
cups-printerappRed Hat cups has Authentication bypass with AuthType Negotiate 8.0 High -
cups-printerappRed Hat libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer 8.6 High -
cups-printerappRed Hat Cupsd Listen arbitrary chmod 0140777 4.4 Medium -
cups-printerappRed Hat An authentication issue was addressed with improved state management. This issue is fixed in... 5.5 Medium -
cups-printerappRed Hat CUPS vulnerable to use-after-free in cupsdAcceptClient() 5.3 Medium -
cups-printerappRed Hat OpenPrinting CUPS vulnerable to heap buffer overflow 7.5 High -
cups-printerappRed Hat A logic issue was addressed with improved state management. This issue is fixed in Security... 6.7 Medium