OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local subnet in default configurations. It can cause the cups & cups-browsed to crash, on all the machines in local network who are listening for printers (so by default for all regular linux machines). On systems where the vulnerability CVE-2024-47176 (cups-filters 1.x/cups-browsed 2.x vulnerability) was not fixed, and the firewall on the machine does not reject incoming communication to IPP port, and the machine is set to be available to public internet, attack vector "Network" is possible. The current versions of CUPS and cups-browsed projects have the attack vector "Adjacent" in their default configurations. Version 2.4.13 contains a patch for CVE-2025-58364.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cups-clientUpgrade cups-printerappUpgrade cups-ipptoolUpgrade cups-libsUpgrade cups-filesystemUpgrade cups-lpdUpgrade cupsUpgrade cups-devel | Sep 30, 2025 | Sep 11, 2025 |
| Alpine Linux | — | Upgrade cups | Dec 5, 2025 | Sep 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade cups-clientUpgrade cups-debuginfoUpgrade cups-filesystemUpgrade cups-ipptoolUpgrade cups-libsUpgrade cups-develUpgrade cups-lpdUpgrade cups | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade cups-lpdUpgrade cups-debugsourceUpgrade cups-libs-debuginfoUpgrade cups-develUpgrade cups-printerapp-debuginfoUpgrade cups-ipptoolUpgrade cups-printerappUpgrade cups-lpd-debuginfoUpgrade cups-ipptool-debuginfoUpgrade cupsUpgrade cups-debuginfoUpgrade cups-libsUpgrade cups-filesystemUpgrade cups-client-debuginfoUpgrade cups-client | Sep 30, 2025 | Sep 11, 2025 |
| Debian | — | Upgrade cups | Sep 15, 2025 | Sep 15, 2025 |
| Freebsd | — | Upgrade cups | Dec 10, 2025 | Sep 12, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cups-libs | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade cups-libs | Dec 12, 2025 | Dec 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade cups-libs | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade cups-libs | Dec 12, 2025 | Dec 11, 2025 |
| Oracle_linux | — | Upgrade cups-filesystemUpgrade cups-lpdUpgrade cups-clientUpgrade cups-ipptoolUpgrade cups-libsUpgrade cups-develUpgrade cupsUpgrade cups-printerapp | Sep 15, 2025 | Sep 11, 2025 |
| Redhat_linux | — | Upgrade cups-client-debuginfoUpgrade cupsUpgrade cups-libs-debuginfoNo solution existsUpgrade cups-clientUpgrade cups-printerappUpgrade cups-printerapp-debuginfoUpgrade cups-ipptool-debuginfoUpgrade cups-lpdUpgrade cups-develUpgrade cups-filesystemUpgrade cups-libsUpgrade cups-debugsourceUpgrade cups-debuginfoUpgrade cups-lpd-debuginfoUpgrade cups-ipptool | Sep 12, 2025 | Sep 11, 2025 |
| Rocky_linux | — | Upgrade cups-printerapp-debuginfoUpgrade cups-printerappUpgrade cups-client-debuginfoUpgrade cups-libsUpgrade cups-lpd-debuginfoUpgrade cups-clientUpgrade cups-debuginfoUpgrade cups-debugsourceUpgrade cups-ipptoolUpgrade cups-lpdUpgrade cups-ipptool-debuginfoUpgrade cupsUpgrade cups-libs-debuginfoUpgrade cups-devel | Feb 5, 2026 | Nov 29, 2025 |
| Suse | — | Upgrade libcupscgi1Upgrade libcupsppdc1-32bitUpgrade cups-clientUpgrade cups-ddkUpgrade libcupsimage2-32bitUpgrade cups-develUpgrade cups-libs-32bitUpgrade cups-devel-32bitUpgrade libcupsmime1Upgrade libcups2Upgrade libcupsppdc1Upgrade cups-libsUpgrade libcupscgi1-32bitUpgrade libcupsmime1-32bitUpgrade cups-configUpgrade libcupsimage2Upgrade libcups2-32bitUpgrade cups | Dec 5, 2025 | Sep 15, 2025 |
| Ubuntu | — | Upgrade cupsUpgrade cups (Ubuntu Pro) | Sep 12, 2025 | Sep 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub