The CUPS service on multiple platforms allows remote attackers to cause a denial of service (service hang) via a "partially-negotiated" SSL connection, which prevents other requests from being accepted.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Cups | — | Upgrade macOS to the latest versionApply OS X security update 2007-003 | Dec 16, 2011 | Mar 13, 2007 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Mar 13, 2007 |
| Freebsd | — | Upgrade cups-base | Dec 10, 2025 | Jun 12, 2007 |
| Gentoo Linux | — | Upgrade app-emulation/emul-linux-x86-baselibs.Upgrade net-print/cups. | Oct 30, 2017 | Mar 13, 2007 |
| Oracle_linux | — | Upgrade cups-libsUpgrade cups-lpdUpgrade cupsUpgrade cups-devel | Oct 16, 2024 | Mar 13, 2007 |
| Suse | — | Upgrade cups-libs-32bitUpgrade cups-libsUpgrade cups-libs-x86Upgrade cupsUpgrade cups-clientUpgrade cups-libs-64bitUpgrade cups-devel | Feb 17, 2015 | Mar 13, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub