The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade cups-libsUpgrade cups-lpdUpgrade cupsUpgrade cups-devel | Dec 1, 2016 | Jun 22, 2010 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Jun 22, 2010 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Jun 22, 2010 |
| Oracle_linux | — | Upgrade cups-lpdUpgrade cupsUpgrade cups-develUpgrade cups-libs | Oct 16, 2024 | Jun 22, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 15, 2010 |
| Suse | — | Upgrade cups-clientUpgrade cups-develUpgrade cups-libs-x86Upgrade cupsUpgrade cups-libs-32bitUpgrade cups-libs | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade cupsUpgrade cupsys | Nov 19, 2024 | Jun 22, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub