The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade cupsUpgrade cups-develUpgrade cups-lpdUpgrade cups-libs | Dec 1, 2016 | Apr 23, 2009 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Apr 23, 2009 |
| Freebsd | — | Upgrade cups-base | Dec 10, 2025 | May 7, 2009 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Apr 23, 2009 |
| Oracle_linux | — | Upgrade cupsUpgrade cups-libsUpgrade cups-lpdUpgrade cups-devel | Oct 16, 2024 | Apr 23, 2009 |
| Suse | — | Upgrade cups154-clientUpgrade libcupscgi1Upgrade libcups2-32bitUpgrade cups-clientUpgrade libcupsmime1Upgrade cups-libsUpgrade cups154-libsUpgrade cups-libs-32bitUpgrade cups154Upgrade cupsUpgrade libcupsimage2Upgrade cups154-filtersUpgrade cups-libs-x86Upgrade cups-ddkUpgrade cups-configUpgrade libcups2Upgrade libcupsppdc1Upgrade cups-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libcupsimage2 | Nov 8, 2024 | Apr 23, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub