CU
Product
Cups
56
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 3Low 0
Watch
Add Cups to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-6094 | 9.8 | Dec 20 | cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system Affected: before 1.5.4-1.1 |
| CVE-2010-2941 | 9.8 | Nov 5 | ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of… Affected: through 1.4.4 |
| CVE-2004-2154 | 9.8 | Dec 31 | CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or… Affected: before 1.1.21; 1.1.21 |
| CVE-2017-18190 | 7.5 | Feb 16 | A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST… Affected: before 2.2.2 |
| CVE-2010-0302 | 7.5 | Mar 5 | Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4,… Affected: before 1.4.4 |
| CVE-2009-3553 | 7.5 | Nov 20 | Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and… Affected: 1.3.7; 1.3.10 |
| CVE-2009-0949 | 7.5 | Jun 9 | The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of… Affected: before 1.3.10 |
| CVE-2008-5183 | 7.5 | Nov 21 | cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which… Affected: through 1.3.9 |
| CVE-2002-1372 | 7.5 | Dec 26 | Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to… Affected: 1.1.14 through 1.1.17 |
| CVE-2022-26691 | 6.7 | May 26 | A logic issue was addressed with improved state management Affected: before 499.4 |
| CVE-2018-4300 | 5.9 | Apr 3 | The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled Affected: before 2.2.10 |
| CVE-2017-18248 | 5.3 | Mar 26 | The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username,… Affected: before 2.2.6 |
| CVE-2014-9679 | – | Feb 19 | Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster… Affected: through 2.0.1 |
| CVE-2014-5031 | – | Jul 29 | The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified… Affected: through 1.7.4; 1.7; 1.7.0; 1.7.1; 1.7.1; 1.7.2; +1 more |
| CVE-2014-5030 | – | Jul 29 | CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py Affected: through 1.7.4; 1.7; 1.7.0; 1.7.1; 1.7.1; 1.7.2; +1 more |
| CVE-2014-5029 | – | Jul 29 | The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null Affected: 1.7.4 |
| CVE-2014-3537 | – | Jul 23 | The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ Affected: through 1.7.3; 1.7; 1.7.0; 1.7.1; 1.7.1; 1.7.2 |
| CVE-2014-2856 | – | Apr 18 | Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML… Affected: through 1.7.1; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2013-6891 | – | Jan 26 | lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink… Affected: through 1.7.0; 1.7; 1.7.1 |
| CVE-2012-5519 | – | Nov 20 | CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions,… Affected: 1.4.4 |
| CVE-2011-3170 | – | Aug 19 | The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a… Affected: through 1.4.8; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2011-2896 | – | Aug 19 | The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS… Affected: through 1.4.6 |
| CVE-2010-3702 | – | Nov 5 | The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows… Affected: through 1.3.11 |
| CVE-2010-2432 | – | Jun 22 | The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows… Affected: through 1.4.3; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2010-2431 | – | Jun 22 | The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1)… Affected: through 1.4.3; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2010-0542 | – | Jun 21 | The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote… Affected: through 1.4.3; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2010-1748 | – | Jun 17 | The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms,… Affected: through 1.4.3; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2010-0393 | – | Mar 5 | The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides… Affected: 1.2.2; 1.3.7; 1.3.9; 1.4.1 |
| CVE-2009-1196 | – | Jun 9 | The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via… Affected: 1.1.17; 1.1.22 |
| CVE-2009-0791 | – | Jun 9 | Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers… Affected: 1.1.17; 1.1.22; 1.3.7 |
| CVE-2009-0164 | – | Apr 24 | The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks Affected: through 1.3.9; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2009-1183 | – | Apr 23 | The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite… Affected: through 1.3.9; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2009-1182 | – | Apr 23 | Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute… Affected: through 1.3.9; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2009-1181 | – | Apr 23 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a… Affected: through 1.3.9; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2009-1180 | – | Apr 23 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted… Affected: through 1.3.9; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2009-1179 | – | Apr 23 | Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary… Affected: through 1.3.9; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2009-0800 | – | Apr 23 | Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to… Affected: through 1.3.9; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2009-0799 | – | Apr 23 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a… Affected: through 1.3.9; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2009-0195 | – | Apr 23 | Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted… Affected: 1.3.9 |
| CVE-2009-0166 | – | Apr 23 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that… Affected: through 1.3.9; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2009-0163 | – | Apr 23 | Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary… Affected: through 1.3.9; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2009-0147 | – | Apr 23 | Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash)… Affected: through 1.3.9; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2009-0146 | – | Apr 23 | Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash)… Affected: through 1.3.9; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2009-0577 | – | Feb 20 | Integer overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to execute arbitrary code via a crafted… Affected: 1.1.17 |
| CVE-2009-0032 | – | Jan 27 | CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a… Affected: All versions, or not specified |
| CVE-2008-5377 | – | Dec 8 | pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pstopdf.log temporary file, a different vulnerability than CVE-2001-1333 Affected: 1.3.8 |
| CVE-2008-5286 | – | Dec 1 | Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote attackers to execute arbitrary code via a PNG image with a large height value, which… Affected: 1.1.17; 1.1.18; 1.1.19; 1.1.19; 1.1.19; 1.1.19; +34 more |
| CVE-2008-5184 | – | Nov 21 | The web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to… Affected: through 1.3.7; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2008-3640 | – | Oct 14 | Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a… Affected: through 1.3.8; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |
| CVE-2008-3639 | – | Oct 14 | Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run… Affected: through 1.3.8; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +34 more |