OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cups-ipptoolUpgrade cups-filesystemUpgrade cups-develUpgrade cups-lpdUpgrade cups-clientUpgrade cupsUpgrade cups-libsUpgrade cups-printerapp | Jan 20, 2026 | Jan 8, 2026 |
| Alpine Linux | — | Upgrade cups | Jan 27, 2026 | Nov 29, 2025 |
| Amazon_linux_2023 | — | Upgrade cups-clientUpgrade cups-filesystemUpgrade cups-libs-debuginfoUpgrade cups-libsUpgrade cups-debugsourceUpgrade cups-debuginfoUpgrade cups-ipptoolUpgrade cups-lpd-debuginfoUpgrade cups-develUpgrade cupsUpgrade cups-ipptool-debuginfoUpgrade cups-printerapp-debuginfoUpgrade cups-client-debuginfoUpgrade cups-printerappUpgrade cups-lpd | Jan 12, 2026 | Nov 28, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cups-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade cups-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade cups-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade cups-libs | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade cupsUpgrade cups-lpdUpgrade cups-clientUpgrade cups-printerappUpgrade cups-develUpgrade cups-libsUpgrade cups-ipptoolUpgrade cups-filesystem | Jan 9, 2026 | Nov 28, 2025 |
| Redhat_linux | — | Upgrade cups-debugsourceUpgrade cups-lpdUpgrade cups-filesystemUpgrade cups-ipptoolUpgrade cups-ipptool-debuginfoUpgrade cups-develUpgrade cups-lpd-debuginfoUpgrade cupsUpgrade cups-libs-debuginfoUpgrade cups-debuginfoNo solution existsUpgrade cups-printerapp-debuginfoUpgrade cups-clientUpgrade cups-printerappUpgrade cups-libsUpgrade cups-client-debuginfo | Jan 15, 2026 | Nov 28, 2025 |
| Rocky_linux | — | Upgrade cups-clientUpgrade cups-printerappUpgrade cups-ipptool-debuginfoUpgrade cups-lpdUpgrade cups-develUpgrade cups-printerapp-debuginfoUpgrade cups-client-debuginfoUpgrade cups-debugsourceUpgrade cups-debuginfoUpgrade cups-libsUpgrade cups-libs-debuginfoUpgrade cups-ipptoolUpgrade cupsUpgrade cups-lpd-debuginfo | Jan 16, 2026 | Jan 15, 2026 |
| Ubuntu | — | Upgrade cups (Ubuntu Pro)Upgrade cups-daemon (Ubuntu Pro)Upgrade cupsUpgrade cups-daemon | Nov 28, 2025 | Nov 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub