CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cups | Aug 30, 2017 | Jul 29, 2014 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Jul 29, 2014 |
| Oracle_linux | — | Upgrade cupsUpgrade cups-libsUpgrade cups-develUpgrade cups-phpUpgrade cups-lpd | Oct 16, 2024 | Jul 29, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 22, 2014 |
| Suse | — | Upgrade cupsUpgrade libcupsmime1Upgrade libcups2Upgrade cups154-clientUpgrade cups-libs-x86Upgrade libcupscgi1Upgrade cups-clientUpgrade cups154-libsUpgrade cups-configUpgrade cups-develUpgrade cups-ddkUpgrade libcupsimage2Upgrade cups-libs-32bitUpgrade libcups2-32bitUpgrade libcupsppdc1Upgrade cups-libsUpgrade cups154-filtersUpgrade cups154 | Dec 18, 2015 | Jul 29, 2014 |
| Ubuntu | — | Upgrade cups | Nov 8, 2024 | Jul 29, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub