CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cups | Aug 30, 2017 | Jul 29, 2014 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Jul 29, 2014 |
| Oracle_linux | — | Upgrade cupsUpgrade cups-libsUpgrade cups-develUpgrade cups-lpdUpgrade cups-php | Oct 16, 2024 | Jul 29, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 22, 2014 |
| Suse | — | Upgrade libcupsimage2Upgrade libcupsppdc1Upgrade cups154Upgrade libcups2-32bitUpgrade cups154-filtersUpgrade cups-libs-32bitUpgrade cups-libsUpgrade cupsUpgrade libcupsmime1Upgrade cups-develUpgrade cups-clientUpgrade cups-ddkUpgrade cups154-libsUpgrade cups-configUpgrade cups154-clientUpgrade libcupscgi1Upgrade cups-libs-x86Upgrade libcups2 | Dec 18, 2015 | Jul 29, 2014 |
| Ubuntu | — | Upgrade cups | Nov 8, 2024 | Jul 29, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub