The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade cups-libsUpgrade cups-lpdUpgrade cupsUpgrade cups-devel | Dec 1, 2016 | Jun 22, 2010 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Jun 22, 2010 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Jun 22, 2010 |
| Oracle_linux | — | Upgrade cups-lpdUpgrade cupsUpgrade cups-develUpgrade cups-libs | Oct 16, 2024 | Jun 22, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 15, 2010 |
| Suse | — | Upgrade cups-libs-32bitUpgrade cups-libsUpgrade cupsUpgrade cups-libs-x86Upgrade cups-develUpgrade cups-client | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade cupsysUpgrade cups | Nov 19, 2024 | Jun 22, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub