OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password is not checked. This results in authentication bypass. Any configuration that allows an `AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-cupsalma-upgrade-cups-clientalma-upgrade-cups-develalma-upgrade-cups-filesystemalma-upgrade-cups-ipptoolalma-upgrade-cups-libsalma-upgrade-cups-lpdalma-upgrade-cups-printerapp | Sep 15, 2025 | Sep 11, 2025 | |
| Alpine Linux | alpine-linux-upgrade-cups | Dec 5, 2025 | Sep 11, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-cupsamazon-linux-ami-2-upgrade-cups-clientamazon-linux-ami-2-upgrade-cups-debuginfoamazon-linux-ami-2-upgrade-cups-develamazon-linux-ami-2-upgrade-cups-filesystemamazon-linux-ami-2-upgrade-cups-ipptoolamazon-linux-ami-2-upgrade-cups-libsamazon-linux-ami-2-upgrade-cups-lpd | May 20, 2026 | May 20, 2026 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-cupsamazon-linux-2023-upgrade-cups-clientamazon-linux-2023-upgrade-cups-client-debuginfoamazon-linux-2023-upgrade-cups-debuginfoamazon-linux-2023-upgrade-cups-debugsourceamazon-linux-2023-upgrade-cups-develamazon-linux-2023-upgrade-cups-filesystemamazon-linux-2023-upgrade-cups-ipptoolamazon-linux-2023-upgrade-cups-ipptool-debuginfoamazon-linux-2023-upgrade-cups-libsamazon-linux-2023-upgrade-cups-libs-debuginfoamazon-linux-2023-upgrade-cups-lpdamazon-linux-2023-upgrade-cups-lpd-debuginfoamazon-linux-2023-upgrade-cups-printerappamazon-linux-2023-upgrade-cups-printerapp-debuginfo | Sep 30, 2025 | Sep 11, 2025 | |
| Debian | debian-upgrade-cups | Sep 15, 2025 | Sep 15, 2025 | |
| Freebsd | freebsd-upgrade-package-cups | Dec 10, 2025 | Sep 12, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-cups-libs | Jan 15, 2026 | Jan 13, 2026 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-cups-libs | Dec 12, 2025 | Nov 11, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-cups-libs | Nov 12, 2025 | Nov 11, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-cups-libs | Dec 12, 2025 | Nov 11, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-cupsoracle-linux-upgrade-cups-clientoracle-linux-upgrade-cups-develoracle-linux-upgrade-cups-filesystemoracle-linux-upgrade-cups-ipptooloracle-linux-upgrade-cups-libsoracle-linux-upgrade-cups-lpdoracle-linux-upgrade-cups-printerapp | Sep 15, 2025 | Sep 11, 2025 |
| Redhat_linux | redhat-upgrade-cupsredhat-upgrade-cups-clientredhat-upgrade-cups-client-debuginforedhat-upgrade-cups-debuginforedhat-upgrade-cups-debugsourceredhat-upgrade-cups-develredhat-upgrade-cups-filesystemredhat-upgrade-cups-ipptoolredhat-upgrade-cups-ipptool-debuginforedhat-upgrade-cups-libsredhat-upgrade-cups-libs-debuginforedhat-upgrade-cups-lpdredhat-upgrade-cups-lpd-debuginforedhat-upgrade-cups-printerappredhat-upgrade-cups-printerapp-debuginfo | Sep 12, 2025 | Sep 11, 2025 | |
| Rocky_linux | rocky-upgrade-cupsrocky-upgrade-cups-clientrocky-upgrade-cups-client-debuginforocky-upgrade-cups-debuginforocky-upgrade-cups-debugsourcerocky-upgrade-cups-develrocky-upgrade-cups-ipptoolrocky-upgrade-cups-ipptool-debuginforocky-upgrade-cups-libsrocky-upgrade-cups-libs-debuginforocky-upgrade-cups-lpdrocky-upgrade-cups-lpd-debuginforocky-upgrade-cups-printerapprocky-upgrade-cups-printerapp-debuginfo | Feb 5, 2026 | Oct 3, 2025 | |
| Suse | — | suse-upgrade-cupssuse-upgrade-cups-clientsuse-upgrade-cups-configsuse-upgrade-cups-ddksuse-upgrade-cups-develsuse-upgrade-cups-devel-32bitsuse-upgrade-cups-libssuse-upgrade-cups-libs-32bitsuse-upgrade-libcups2suse-upgrade-libcups2-32bitsuse-upgrade-libcupscgi1suse-upgrade-libcupscgi1-32bitsuse-upgrade-libcupsimage2suse-upgrade-libcupsimage2-32bitsuse-upgrade-libcupsmime1suse-upgrade-libcupsmime1-32bitsuse-upgrade-libcupsppdc1suse-upgrade-libcupsppdc1-32bit | Dec 5, 2025 | Sep 15, 2025 |
| Ubuntu | ubuntu-pro-upgrade-cupsubuntu-upgrade-cups | Sep 12, 2025 | Sep 11, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Oct 9, 2025 | Sep 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub