OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cups-develUpgrade cups-ipptoolUpgrade cups-clientUpgrade cups-lpdUpgrade cups-filesystemUpgrade cups-printerappUpgrade cups-libsUpgrade cups | Jan 20, 2026 | Jan 8, 2026 |
| Alpine Linux | — | Upgrade cups | Jan 27, 2026 | Nov 29, 2025 |
| Amazon_linux_2023 | — | Upgrade cups-filesystemUpgrade cups-libs-debuginfoUpgrade cups-debugsourceUpgrade cups-clientUpgrade cups-debuginfoUpgrade cups-ipptoolUpgrade cups-libsUpgrade cups-lpdUpgrade cups-printerapp-debuginfoUpgrade cups-lpd-debuginfoUpgrade cups-develUpgrade cupsUpgrade cups-client-debuginfoUpgrade cups-ipptool-debuginfoUpgrade cups-printerapp | Jan 12, 2026 | Nov 28, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cups-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade cups-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade cups-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade cups-libs | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade cups-libsUpgrade cups-filesystemUpgrade cups-ipptoolUpgrade cupsUpgrade cups-clientUpgrade cups-develUpgrade cups-lpdUpgrade cups-printerapp | Jan 9, 2026 | Nov 28, 2025 |
| Redhat_linux | — | Upgrade cups-libs-debuginfoUpgrade cups-libsUpgrade cupsUpgrade cups-client-debuginfoUpgrade cups-printerappNo solution existsUpgrade cups-debuginfoUpgrade cups-printerapp-debuginfoUpgrade cups-clientUpgrade cups-debugsourceUpgrade cups-ipptoolUpgrade cups-filesystemUpgrade cups-lpd-debuginfoUpgrade cups-lpdUpgrade cups-ipptool-debuginfoUpgrade cups-devel | Jan 15, 2026 | Nov 28, 2025 |
| Rocky_linux | — | Upgrade cups-printerapp-debuginfoUpgrade cups-lpdUpgrade cups-ipptool-debuginfoUpgrade cups-develUpgrade cups-client-debuginfoUpgrade cups-printerappUpgrade cups-clientUpgrade cups-libsUpgrade cups-debuginfoUpgrade cups-libs-debuginfoUpgrade cups-ipptoolUpgrade cups-debugsourceUpgrade cups-lpd-debuginfoUpgrade cups | Jan 16, 2026 | Jan 15, 2026 |
| Ubuntu | — | Upgrade cups-daemonUpgrade cups (Ubuntu Pro)Upgrade cups-daemon (Ubuntu Pro)Upgrade cups | Nov 28, 2025 | Nov 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub