The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Cups | — | Upgrade macOS to the latest versionApply OS X security update 2010-007 | Dec 16, 2011 | Nov 5, 2010 |
| Centos_linux | — | Upgrade cups-libsUpgrade cupsUpgrade cups-lpdUpgrade cups-devel | Dec 1, 2016 | Nov 5, 2010 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Nov 5, 2010 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Nov 5, 2010 |
| Oracle_linux | — | Upgrade cups-phpUpgrade cups-libsUpgrade cups-develUpgrade cups-lpdUpgrade cups | Oct 16, 2024 | Nov 5, 2010 |
| Suse | — | Upgrade cups154-filtersUpgrade libcupscgi1Upgrade cups154Upgrade cups-develUpgrade libcups2Upgrade cups-libs-x86Upgrade cups-clientUpgrade libcupsppdc1Upgrade cupsUpgrade cups-configUpgrade cups154-clientUpgrade cups154-libsUpgrade libcups2-32bitUpgrade cups-libsUpgrade cups-libs-32bitUpgrade cups-ddkUpgrade libcupsmime1Upgrade libcupsimage2 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade cupsUpgrade cupsys | Nov 8, 2024 | Nov 5, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub