A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade cups-develUpgrade cupsUpgrade cups-clientUpgrade cups-lpdUpgrade cups-filesystemUpgrade cups-libsUpgrade cups-debuginfoUpgrade cups-ipptool | Aug 21, 2024 | May 5, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade cups-libsUpgrade cups-clientUpgrade cups-lpdUpgrade cupsUpgrade cups-filesystemUpgrade cups-devel | Sep 16, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cups-clientUpgrade cups-libsUpgrade cupsUpgrade cups-filesystemUpgrade cups-lpdUpgrade cups-devel | Sep 7, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cups-lpdUpgrade cupsUpgrade cups-develUpgrade cups-libsUpgrade cups-clientUpgrade cups-filesystem | Aug 10, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cups-libs | Aug 10, 2021 | May 5, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 5, 2021 |
| Suse | — | Upgrade cups-devel-32bitUpgrade cups-libsUpgrade libcupsimage2-32bitUpgrade libcupscgi1-32bitUpgrade libcups2-32bitUpgrade libcupsimage2Upgrade libcupsmime1-32bitUpgrade libcupsmime1Upgrade libcupsppdc1-32bitUpgrade cups-configUpgrade libcupsppdc1Upgrade cupsUpgrade cups-libs-32bitUpgrade libcupscgi1Upgrade cups-ddkUpgrade cups-develUpgrade cups-clientUpgrade libcups2 | May 1, 2021 | Apr 30, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub