OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password is not checked. This results in authentication bypass. Any configuration that allows an `AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cups-clientUpgrade cups-ipptoolUpgrade cups-libsUpgrade cups-printerappUpgrade cupsUpgrade cups-lpdUpgrade cups-develUpgrade cups-filesystem | Sep 15, 2025 | Sep 11, 2025 |
| Alpine Linux | — | Upgrade cups | Dec 5, 2025 | Sep 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade cups-develUpgrade cups-lpdUpgrade cups-filesystemUpgrade cups-ipptoolUpgrade cupsUpgrade cups-debuginfoUpgrade cups-clientUpgrade cups-libs | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade cups-debugsourceUpgrade cups-client-debuginfoUpgrade cups-libsUpgrade cups-ipptoolUpgrade cups-libs-debuginfoUpgrade cupsUpgrade cups-debuginfoUpgrade cups-printerappUpgrade cups-clientUpgrade cups-lpd-debuginfoUpgrade cups-filesystemUpgrade cups-develUpgrade cups-ipptool-debuginfoUpgrade cups-lpdUpgrade cups-printerapp-debuginfo | Sep 30, 2025 | Sep 11, 2025 |
| Debian | — | Upgrade cups | Sep 15, 2025 | Sep 15, 2025 |
| Freebsd | — | Upgrade cups | Dec 10, 2025 | Sep 12, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cups-libs | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade cups-libs | Dec 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade cups-libs | Nov 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade cups-libs | Dec 12, 2025 | Nov 11, 2025 |
| Oracle_linux | — | Upgrade cups-ipptoolUpgrade cups-printerappUpgrade cups-develUpgrade cups-lpdUpgrade cups-clientUpgrade cups-filesystemUpgrade cupsUpgrade cups-libs | Sep 15, 2025 | Sep 11, 2025 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Aug 10, 2026 | Sep 11, 2025 |
| Redhat_linux | — | Upgrade cups-lpd-debuginfoUpgrade cups-libsUpgrade cups-ipptool-debuginfoUpgrade cups-clientNo solution existsUpgrade cups-debuginfoUpgrade cups-ipptoolUpgrade cups-printerapp-debuginfoUpgrade cups-develUpgrade cups-printerappUpgrade cups-libs-debuginfoUpgrade cups-filesystemUpgrade cupsUpgrade cups-lpdUpgrade cups-client-debuginfoUpgrade cups-debugsource | Sep 12, 2025 | Sep 11, 2025 |
| Rocky_linux | — | Upgrade cups-ipptoolUpgrade cups-libsUpgrade cups-printerapp-debuginfoUpgrade cups-debugsourceUpgrade cups-ipptool-debuginfoUpgrade cups-debuginfoUpgrade cups-clientUpgrade cups-libs-debuginfoUpgrade cups-lpdUpgrade cups-printerappUpgrade cupsUpgrade cups-lpd-debuginfoUpgrade cups-client-debuginfoUpgrade cups-devel | Feb 5, 2026 | Oct 3, 2025 |
| Suse | — | Upgrade libcupsmime1-32bitUpgrade libcupscgi1-32bitUpgrade cups-devel-32bitUpgrade libcupscgi1Upgrade libcupsppdc1-32bitUpgrade cups-clientUpgrade libcups2-32bitUpgrade libcupsmime1Upgrade libcupsimage2-32bitUpgrade cups-configUpgrade libcupsimage2Upgrade cupsUpgrade libcups2Upgrade cups-develUpgrade libcupsppdc1Upgrade cups-libs-32bitUpgrade cups-libsUpgrade cups-ddk | Dec 5, 2025 | Sep 15, 2025 |
| Ubuntu | — | Upgrade cupsUpgrade cups (Ubuntu Pro) | Sep 12, 2025 | Sep 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Sep 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub