The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cups | Aug 30, 2017 | Jul 29, 2014 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Jul 29, 2014 |
| Oracle_linux | — | Upgrade cups-phpUpgrade cups-libsUpgrade cupsUpgrade cups-develUpgrade cups-lpd | Oct 16, 2024 | Jul 29, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 22, 2014 |
| Suse | — | Upgrade cups-libsUpgrade cups-configUpgrade libcups2Upgrade libcupsppdc1Upgrade cups-libs-32bitUpgrade cups154Upgrade cups-ddkUpgrade libcupscgi1Upgrade cups-clientUpgrade cupsUpgrade cups154-filtersUpgrade cups154-libsUpgrade libcupsmime1Upgrade libcupsimage2Upgrade cups154-clientUpgrade cups-develUpgrade libcups2-32bitUpgrade cups-libs-x86 | Dec 18, 2015 | Jul 29, 2014 |
| Ubuntu | — | Upgrade cups | Nov 8, 2024 | Jul 29, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub