OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cupsUpgrade cups-libsUpgrade cups-printerappUpgrade cups-filesystemUpgrade cups-clientUpgrade cups-ipptoolUpgrade cups-develUpgrade cups-lpd | Jan 20, 2026 | Jan 8, 2026 |
| Alpine Linux | — | Upgrade cups | Jan 27, 2026 | Nov 29, 2025 |
| Amazon_linux_2023 | — | Upgrade cups-ipptool-debuginfoUpgrade cups-printerapp-debuginfoUpgrade cups-client-debuginfoUpgrade cups-develUpgrade cupsUpgrade cups-lpdUpgrade cups-lpd-debuginfoUpgrade cups-printerappUpgrade cups-libsUpgrade cups-clientUpgrade cups-debugsourceUpgrade cups-ipptoolUpgrade cups-debuginfoUpgrade cups-libs-debuginfoUpgrade cups-filesystem | Jan 12, 2026 | Nov 28, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cups-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade cups-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade cups-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade cups-libs | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade cups-lpdUpgrade cupsUpgrade cups-clientUpgrade cups-develUpgrade cups-printerappUpgrade cups-libsUpgrade cups-ipptoolUpgrade cups-filesystem | Jan 9, 2026 | Nov 28, 2025 |
| Redhat_linux | — | Upgrade cupsUpgrade cups-client-debuginfoUpgrade cups-debuginfoUpgrade cups-libsUpgrade cups-printerappUpgrade cups-printerapp-debuginfoUpgrade cups-libs-debuginfoUpgrade cups-clientNo solution existsUpgrade cups-ipptoolUpgrade cups-ipptool-debuginfoUpgrade cups-lpdUpgrade cups-lpd-debuginfoUpgrade cups-filesystemUpgrade cups-develUpgrade cups-debugsource | Jan 15, 2026 | Nov 28, 2025 |
| Rocky_linux | — | Upgrade cups-debuginfoUpgrade cups-debugsourceUpgrade cups-lpd-debuginfoUpgrade cups-libsUpgrade cups-libs-debuginfoUpgrade cupsUpgrade cups-ipptoolUpgrade cups-client-debuginfoUpgrade cups-printerapp-debuginfoUpgrade cups-printerappUpgrade cups-clientUpgrade cups-develUpgrade cups-ipptool-debuginfoUpgrade cups-lpd | Jan 16, 2026 | Jan 15, 2026 |
| Ubuntu | — | Upgrade cups-daemon (Ubuntu Pro)Upgrade cups (Ubuntu Pro)Upgrade cupsUpgrade cups-daemon | Nov 28, 2025 | Nov 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub