The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cups | Aug 30, 2017 | Jul 29, 2014 |
| Apple Osx Cups | — | Upgrade macOS to the latest version | Apr 5, 2017 | Jul 23, 2014 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Jul 23, 2014 |
| Oracle_linux | — | Upgrade cups-phpUpgrade cups-develUpgrade cups-lpdUpgrade cupsUpgrade cups-libs | Oct 16, 2024 | Jul 23, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 14, 2014 |
| Suse | — | Upgrade cups-clientUpgrade cups-libs-x86Upgrade libcups2Upgrade cupsUpgrade libcupscgi1Upgrade cups-develUpgrade libcupsmime1Upgrade cups154-libsUpgrade cups154-clientUpgrade cups-ddkUpgrade cups-configUpgrade cups154Upgrade cups-libsUpgrade libcups2-32bitUpgrade libcupsimage2Upgrade cups-libs-32bitUpgrade libcupsppdc1Upgrade cups154-filters | Dec 18, 2015 | Jul 23, 2014 |
| Ubuntu | — | Upgrade cups | Nov 8, 2024 | Jul 23, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub