OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer overflow in the CUPS scheduler when building filter option strings from job attribute. At time of publication, there are no publicly available patches.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cups | Apr 29, 2026 | Apr 3, 2026 |
| Amazon Linux Ami 2 | — | Upgrade cups-lpdUpgrade cups-develUpgrade cupsUpgrade cups-libsUpgrade cups-clientUpgrade cups-filesystemUpgrade cups-ipptoolUpgrade cups-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade cups-filesystemUpgrade cups-ipptool-debuginfoUpgrade cups-develUpgrade cupsUpgrade cups-printerapp-debuginfoUpgrade cups-lpdUpgrade cups-libs-debuginfoUpgrade cups-debugsourceUpgrade cups-printerappUpgrade cups-debuginfoUpgrade cups-libsUpgrade cups-clientUpgrade cups-lpd-debuginfoUpgrade cups-client-debuginfoUpgrade cups-ipptool | May 4, 2026 | Apr 3, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 3, 2026 |
| Ubuntu | — | Upgrade cups-daemonUpgrade cups | Jun 9, 2026 | Jun 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 3, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub