The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cups | Aug 30, 2017 | Jul 29, 2014 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Jul 29, 2014 |
| Oracle_linux | — | Upgrade cups-lpdUpgrade cups-develUpgrade cups-phpUpgrade cups-libsUpgrade cups | Oct 16, 2024 | Jul 29, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 22, 2014 |
| Suse | — | Upgrade cups-libs-32bitUpgrade libcups2Upgrade cups154Upgrade cups-clientUpgrade cups-libsUpgrade libcupsppdc1Upgrade libcupscgi1Upgrade cups-ddkUpgrade cups-configUpgrade cupsUpgrade libcupsmime1Upgrade cups-develUpgrade cups154-clientUpgrade libcupsimage2Upgrade cups-libs-x86Upgrade cups154-libsUpgrade cups154-filtersUpgrade libcups2-32bit | Dec 18, 2015 | Jul 29, 2014 |
| Ubuntu | — | Upgrade cups | Nov 8, 2024 | Jul 29, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub