OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument, providing world-writable access to the target. Given that cupsd is often running as root, this can result in the change of permission of any user or system files to be world writable. Given the aforementioned Ubuntu AppArmor context, on such systems this vulnerability is limited to those files modifiable by the cupsd process. In that specific case it was found to be possible to turn the configuration of the Listen argument into full control over the cupsd.conf and cups-files.conf configuration files. By later setting the User and Group arguments in cups-files.conf, and printing with a printer configured by PPD with a `FoomaticRIPCommandLine` argument, arbitrary user and group (not root) command execution could be achieved, which can further be used on Ubuntu systems to achieve full root command execution. Commit ff1f8a623e090dee8a8aadf12a6a4b25efac143d contains a patch for the issue.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cups-develUpgrade cupsUpgrade cups-lpdUpgrade cups-ipptoolUpgrade cups-clientUpgrade cups-libsUpgrade cups-filesystemUpgrade cups-printerapp | Jul 4, 2024 | Jun 11, 2024 |
| Alpine Linux | — | Upgrade cups | Aug 22, 2024 | Jun 11, 2024 |
| Amazon_linux_2023 | — | Upgrade cups-debuginfoUpgrade cups-ipptoolUpgrade cups-clientUpgrade cups-libsUpgrade cups-filesystemUpgrade cups-debugsourceUpgrade cups-printerapp-debuginfoUpgrade cups-develUpgrade cups-lpd-debuginfoUpgrade cupsUpgrade cups-lpdUpgrade cups-libs-debuginfoUpgrade cups-printerappUpgrade cups-ipptool-debuginfoUpgrade cups-client-debuginfo | Feb 17, 2025 | Jun 11, 2024 |
| Debian | — | Upgrade cups | Jun 17, 2024 | Jun 11, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cups-libs | Oct 8, 2024 | Jun 11, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade cups-libs | Oct 9, 2024 | Jun 11, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade cups-libs | Oct 9, 2024 | Jun 11, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cups-libs | Oct 8, 2024 | Jun 11, 2024 |
| Oracle_linux | — | Upgrade cupsUpgrade cups-develUpgrade cups-lpdUpgrade cups-ipptoolUpgrade cups-libsUpgrade cups-clientUpgrade cups-filesystemUpgrade cups-printerapp | Jul 3, 2024 | Jun 11, 2024 |
| Redhat_linux | — | Upgrade cups-printerapp-debuginfoUpgrade cups-debuginfoUpgrade cups-libsUpgrade cups-client-debuginfoUpgrade cups-printerappUpgrade cups-libs-debuginfoUpgrade cups-lpdUpgrade cups-develUpgrade cups-filesystemNo solution existsUpgrade cups-ipptoolUpgrade cups-ipptool-debuginfoUpgrade cupsUpgrade cups-clientUpgrade cups-debugsourceUpgrade cups-lpd-debuginfo | Jul 3, 2024 | Jun 11, 2024 |
| Rocky_linux | — | Upgrade cups-develUpgrade cups-ipptool-debuginfoUpgrade cups-clientUpgrade cups-lpd-debuginfoUpgrade cups-lpdUpgrade cups-libs-debuginfoUpgrade cups-client-debuginfoUpgrade cups-debugsourceUpgrade cups-ipptoolUpgrade cups-debuginfoUpgrade cups-libsUpgrade cups | May 8, 2025 | Jun 11, 2024 |
| Suse | — | Upgrade libcupsppdc1Upgrade cups-clientUpgrade libcupscgi1Upgrade cups-ddkUpgrade cupsUpgrade libcups2Upgrade cups-libs-32bitUpgrade cups-devel-32bitUpgrade cups-configUpgrade libcups2-32bitUpgrade libcupsmime1Upgrade libcupsimage2-32bitUpgrade cups-develUpgrade libcupsimage2Upgrade libcupsmime1-32bitUpgrade libcupscgi1-32bitUpgrade cups-libsUpgrade libcupsppdc1-32bit | Jun 13, 2024 | Jun 11, 2024 |
| Ubuntu | — | Upgrade cupsUpgrade cups (Ubuntu Pro) | Jun 27, 2024 | Jun 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub