cups vulnerabilities (openSUSE)
65 vulnerabilities.
-
cupsopenSUSE CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix) 2.5 Low -
cupsopenSUSE cups security update 5.8 Medium -
cupsopenSUSE OpenPrinting CUPS: root-side banner file disclosure 5.3 Medium -
cupsopenSUSE CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root) 5.7 Medium -
cupsopenSUSE CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip 3.3 Low -
cupsopenSUSE Cups: cups: argument injection in mailto notifier via notify-recipient-uri 2.5 Low -
cupsopenSUSE Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up) 3.0 Low -
cupsopenSUSE Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound 4.3 Medium -
cupsopenSUSE OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users 4.3 Medium -
cupsopenSUSE CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer 4.0 Medium -
cupsopenSUSE CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported` 4.0 Medium -
cupsopenSUSE OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network 6.1 Medium -
cupsopenSUSE OpenPrinting CUPS: Heap overflow in `get_options()` 5.3 Medium -
cupsopenSUSE OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache) 6.5 Medium -
cupsopenSUSE OpenPrinting CUPS: Local print admin token disclosure using temporary printers 5.0 Medium -
cupsopenSUSE OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup 4.8 Medium -
cupsopenSUSE OpenPrinting CUPS vulnerable to stack based out-of-bound write 6.0 Medium -
cupsopenSUSE OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack 5.1 Medium -
cupsopenSUSE cups: Remote DoS via null dereference 6.5 Medium -
cupsopenSUSE cups has Authentication bypass with AuthType Negotiate 8.0 High -
cupsopenSUSE libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer 8.6 High -
cupsopenSUSE Cupsd Listen arbitrary chmod 0140777 4.4 Medium -
cupsopenSUSE OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow 7.0 High -
cupsopenSUSE An authentication issue was addressed with improved state management. This issue is fixed in... 5.5 Medium -
cupsopenSUSE CUPS vulnerable to use-after-free in cupsdAcceptClient() 5.3 Medium -
cupsopenSUSE OpenPrinting CUPS vulnerable to heap buffer overflow 7.5 High -
cupsopenSUSE A logic issue was addressed with improved state management. This issue is fixed in Security... 6.7 Medium -
cupsopenSUSE cups: ownership of /var/log/cups allows the lp user to create files as root 3.3 Low -
cupsopenSUSE An input validation issue was addressed with improved memory handling. This issue is fixed in... 5.5 Medium -
cupsopenSUSE A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS... 3.3 Low -
cupsopenSUSE A memory corruption issue was addressed with improved validation. This issue is fixed in macOS... 7.8 High -
cupsopenSUSE cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which... 9.8 Critical -
cupsopenSUSE In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check... 5.5 Medium -
cupsopenSUSE A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS... 8.8 High -
cupsopenSUSE A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS... 8.8 High -
cupsopenSUSE Red Hat Security Advisory: cups security and bug fix update 7.3 High -
cupsopenSUSE The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can... 5.3 Medium -
cupsopenSUSE Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the... 4.3 Medium -
cupsopenSUSE The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free... 10.0 High -
cupsopenSUSE The web interface in CUPS before 2.0 does not check that files have world-readable permissions,... 5.0 Medium -
cupsopenSUSE CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html... 1.9 Low -
cupsopenSUSE The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a... 1.5 Low -
cupsopenSUSE The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files... 1.2 Low -
cupsopenSUSE Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System ... 4.3 Medium -
cupsopenSUSE CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web... 7.2 High -
cupsopenSUSE ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values... 9.8 Critical -
cupsopenSUSE The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1... 6.8 Medium -
cupsopenSUSE The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as... 4.3 Medium -
cupsopenSUSE Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as... 6.0 Medium -
cupsopenSUSE The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4... 6.9 Medium - Show olderLoading…