cups-devel vulnerabilities (TuxCare)
29 vulnerabilities.
cups-develTuxCareOpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group...3.3 Lowcups-develTuxCareOpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a...5.1 Mediumcups-develTuxCareOpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add...2.3 Lowcups-develTuxCareOpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission...3.3 Lowcups-develTuxCareCUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip3.3 Lowcups-develTuxCareUpdate of cupsNo scorecups-develTuxCareUpdate of cupsNo scorecups-develTuxCareUpdate of cupsNo scorecups-develTuxCareOpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users4.3 Mediumcups-develTuxCareCUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer4.0 Mediumcups-develTuxCareCUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`4.0 Mediumcups-develTuxCareOpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network6.1 Mediumcups-develTuxCareOpenPrinting CUPS: Heap overflow in `get_options()`5.3 Mediumcups-develTuxCareOpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)6.5 Mediumcups-develTuxCareOpenPrinting CUPS: Local print admin token disclosure using temporary printers5.0 Mediumcups-develTuxCareOpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup4.8 Mediumcups-develTuxCareOpenPrinting CUPS vulnerable to stack based out-of-bound write6.0 Mediumcups-develTuxCareOpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack5.1 Mediumcups-develTuxCarecups: Remote DoS via null dereference6.5 Mediumcups-develTuxCarecups has Authentication bypass with AuthType Negotiate8.0 Highcups-develTuxCarelibppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer8.6 Highcups-develTuxCareCupsd Listen arbitrary chmod 01407774.4 Mediumcups-develTuxCareOpenPrinting CUPS/libppd Postscript Parsing Heap Overflow7.0 Highcups-develTuxCareAn authentication issue was addressed with improved state management. This issue is fixed in...5.5 Mediumcups-develTuxCareCUPS vulnerable to use-after-free in cupsdAcceptClient()5.3 Mediumcups-develTuxCareOpenPrinting CUPS vulnerable to heap buffer overflow7.5 Highcups-develTuxCareA logic issue was addressed with improved state management. This issue is fixed in Security...6.7 Mediumcups-develTuxCarecups: ownership of /var/log/cups allows the lp user to create files as root3.3 Lowcups-develTuxCareAn input validation issue was addressed with improved memory handling. This issue is fixed in...5.5 Medium