Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which triggers a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cups | Aug 30, 2017 | Feb 19, 2015 |
| Centos_linux | — | Upgrade cups-develUpgrade cupsUpgrade cups-lpdUpgrade cups-filesystemUpgrade cups-libsUpgrade cups-clientUpgrade cups-ipptoolUpgrade cups-php | Dec 1, 2016 | Feb 19, 2015 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Feb 19, 2015 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Feb 19, 2015 |
| Oracle Solaris | — | Upgrade library/print/cups-libs to version 1.4.5-0.175.3.9.0.3.0 on Solaris 11.3Upgrade print/cups to version 1.4.5-0.175.3.9.0.3.0 on Solaris 11.3 | May 29, 2017 | Feb 19, 2015 |
| Oracle_linux | — | Upgrade cups-filesystemUpgrade cups-ipptoolUpgrade cups-libsUpgrade cups-clientUpgrade cupsUpgrade cups-phpUpgrade cups-lpdUpgrade cups-devel | Oct 16, 2024 | Feb 19, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 10, 2015 |
| Suse | — | Upgrade cups-clientUpgrade cups-libs-x86Upgrade cups-develUpgrade cups-ddkUpgrade cups-libs-32bitUpgrade cups154-libsUpgrade cups154-clientUpgrade cups154-filtersUpgrade cupsUpgrade cups154Upgrade cups-libs | Dec 18, 2015 | Feb 19, 2015 |
| Ubuntu | — | Upgrade cups | Nov 8, 2024 | Feb 19, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub