pkg:Debian/cups

All known vulnerabilities

• CRITICAL9.8CVE-2024-47175cups - security update
  from 0, < 2.3.3op2-3+deb11u9
• CRITICAL9.8CVE-2024-47175cups - security update
  from 0, < 2.4.2-3+deb12u8
• CRITICAL9.8CVE-2024-47175cups - security update
  from 0, < 2.3.3op2-3+deb11u9
• CRITICAL9.8ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allow…
  from 0, < 1.4.4-7
• CRITICAL9.8CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a pri…
  from 0, < 1.1.20final+rc1-1
• HIGH8.8A buffer overflow issue was addressed with improved memory handling.
  from 0, < 2.2.12-1
• HIGH8.8A buffer overflow issue was addressed with improved memory handling.
  from 0, < 2.2.12-1
• HIGH8.8The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links.
  from 0, < 2.2.8-5
• HIGH8.8The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attack…
  from 0
• HIGH8.0cups - security update
  from 0, < 2.3.3op2-3+deb11u10
• HIGH8.0cups - security update
  from 0, < 2.3.3op2-3+deb11u10
• HIGH8.0cups - security update
  from 0, < 2.4.2-3+deb12u9
• HIGH7.8A memory corruption issue was addressed with improved validation.
  from 0, < 2.3.1-12
• HIGH7.8cups - security update
  from 0, < 1.7.5-11+deb8u4
• HIGH7.8cups - security update
  from 0, < 2.2.8-2
• HIGH7.8cups - security update
  from 0, < 2.2.3-2
• HIGH7.8cups - security update
  from 0, < 2.2.1-8+deb9u2
• HIGH7.5OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.
  from 0
• HIGH7.5cups - security update
  from 0, < 1.5.3-5+deb7u7
• HIGH7.5cups - security update
  from 0, < 2.2.3-2
• HIGH7.5cups - security update
  from 0, < 1.7.5-11+deb8u3
• HIGH7.5Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the…
  from 0, < 1.4.2-10
• HIGH7.5Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the…
  from 0, < 1.4.2-4
• HIGH7.5cups cupsys - denial of service
  from 0, < 1.3.8-1+lenny6
• HIGH7.5cups cupsys - denial of service
  from 0, < 1.3.10-1
• HIGH7.5cups - several
  from 0, < 1.3.8-1+lenny9
• HIGH7.5cups - several
  from 0, < 1.3.9-13
• HIGH7.5Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, w…
  from 0, < 1.1.18-1
• HIGH7.1cups - security update
  from 0, < 2.2.10-6+deb10u8
• HIGH7.1cups - security update
  from 0, < 2.3.3op2-3+deb11u3
• HIGH7.0Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-…
  from 0, < 2.3.3op2-3+deb11u4
• MEDIUM6.7OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.
  from 0
• MEDIUM6.7cups - security update
  from 0, < 2.3.3op2-3+deb11u7
• MEDIUM6.7cups - security update
  from 0, < 2.2.10-6+deb10u10
• MEDIUM6.7cups - security update
  from 0, < 2.3.3op2-3+deb11u2
• MEDIUM6.7cups - security update
  from 0, < 2.2.10-6+deb10u6
• MEDIUM6.7cups - security update
  from 0, < 2.2.1-8+deb9u8
• MEDIUM6.5OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.
  from 0
• MEDIUM6.5OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.
  from 0, < 2.3.3op2-3+deb11u10
• MEDIUM6.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.
  from 0
• MEDIUM6.2OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.
  from 0
• MEDIUM6.2OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.
  from 0
• MEDIUM5.9cups - security update
  from 0, < 2.2.10-1
• MEDIUM5.9cups - security update
  from 0, < 1.7.5-11+deb8u6
• MEDIUM5.5OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.
  from 0
• MEDIUM5.5cups - security update
  from 0, < 2.3.3op2-3+deb11u4
• MEDIUM5.5cups - security update
  from 0, < 2.2.10-6+deb10u9
• MEDIUM5.5cups - security update
  from 0, < 2.2.10-6+deb10u7
• MEDIUM5.5cups - security update
  from 0, < 2.3.3op2-3+deb11u3
• MEDIUM5.5cups - security update
  from 0, < 2.2.1-8+deb9u7
• MEDIUM5.5cups - security update
  from 0, < 2.3.3op2-1
• MEDIUM5.5cups - security update
  from 0, < 1.7.5-11+deb8u7
• MEDIUM5.5cups - security update
  from 0, < 2.3.1-1
• MEDIUM5.5cups - security update
  from 0, < 1.7.5-11+deb8u5
• MEDIUM5.5cups - security update
  from 0, < 2.2.12-1
• MEDIUM5.5In macOS High Sierra before 10.13.5, an issue existed in CUPS.
  from 0, < 2.2.8-2
• MEDIUM5.4OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.
  from 0
• MEDIUM5.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.
  from 0
• MEDIUM5.3cups - security update
  from 0, < 2.2.6-1
• MEDIUM5.3cups - security update
  from 0, < 1.5.3-5+deb7u8
• LOW3.3cups - security update
  from 0, < 2.3.1-12
• LOW3.3cups - security update
  from 0, < 1.7.5-11+deb8u8
• —OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.
  from 0
• —Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (cra…
  from 0, < 1.5.0-16
• —cups-filters - security update
  from 0, < 1.5.0-16
• —cups-filters - security update
  from 0, < 1.4.4-7+squeeze10
• —Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows…
  from 0, < 1.7.5-12
• —cups - security update
  from 0, < 1.5.3-5+deb7u6
• —cups - security update
  from 0, < 1.7.5-12
• —cups - security update
  from 0, < 1.4.4-7+squeeze8
• —cups - security update
  from 0, < 1.7.5-11
• —cups - security update
  from 0, < 1.4.4-7+squeeze7
• —cups - security update
  from 0, < 1.5.3-5+deb7u5
• —The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains se…
  from 0, < 1.7.4-2
• —CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index…
  from 0, < 1.7.4-2
• —The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cup…
  from 0, < 1.7.4-2
• —cups - security update
  from 0, < 1.4.4-7+squeeze6
• —cups - security update
  from 0, < 1.7.4-1
• —cups - security update
  from 0, < 1.5.3-5+deb7u4
• —Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers t…
  from 0, < 1.7.2-1
• —The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local us…
  from 0, < 1.5.0-16
• —Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0…
  from 0, < 1.5.0-16
• —cups - security update
  from 0, < 1.5.0-16
• —cups - security update
  from 0, < 1.4.4-7+squeeze4
• —lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified H…
  from 0, < 1.7.1-1
• —cups - privilege escalation
  from 0, < 1.4.4-7+squeeze2
• —cups - privilege escalation
  from 0, < 1.5.3-2.7
• —The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, wh…
  from 0, < 1.5.0-8
• —cups - several
  from 0, < 1.5.0-8
• —cups - several
  from 0, < 1.4.4-7+squeeze1
• —The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a dem…
  from 0, < 1.4.4-1
• —The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink att…
  from 0, < 1.4.4-1
• —The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of c…
  from 0, < 1.4.4-1
• —The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 1…
  from 0, < 1.4.4-1
• —Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6…
  from 0, < 1.4.4-1
• —cups - arbitrary code execution
  from 0, < 1.4.2-9.1
• —cups - arbitrary code execution
  from 0, < 1.3.8-1+lenny8
• —cups cupsys - cross-site scripting
  from 0, < 1.3.8-1+lenny7
• —cups cupsys - cross-site scripting
  from 0, < 1.4.2-1
• —The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd…
  from 0, < 1.1.99.b1.r4748-1