Red Hat Enterprise Linux 7/cups

Red Hat · Package

28 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
cups: cups: Arbitrary file overwrite via insecure temporary file handlingCVE-2026-55480	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: Invalid usernames handled in scheduler/ipp.c:add_job() allow remote attackers to cause a denial of serviceCVE-2017-18248	Red Hat Enterprise Linux 7/cups	Red Hat	Low	No fix reported	Not recorded
cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.cCVE-2020-3898	Red Hat Enterprise Linux 5/cups Red Hat Enterprise Linux 6/cups	Red Hat	Low	No fix reported	Not recorded
cups: access to uninitialized buffer in ipp.cCVE-2020-10001	Red Hat Enterprise Linux 5/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: insecure permissions of /var/log/cups allows for symlink attacksCVE-2021-25317	Red Hat Enterprise Linux 6/cups Red Hat Enterprise Linux 7/cups	Red Hat	Low	No fix reported	Not recorded
cups: heap buffer overflow may lead to DoSCVE-2023-32324	Red Hat Enterprise Linux 6/cups Red Hat Enterprise Linux 7/cups	Red Hat	Medium	No fix reported	Not recorded
cups: use-after-free in cupsdAcceptClient() in scheduler/client.cCVE-2023-34241	Red Hat Enterprise Linux 6/cups Red Hat Enterprise Linux 7/cups	Red Hat	Medium	No fix reported	Not recorded
libppd: Postscript Parsing Heap OverflowCVE-2023-4504	Red Hat Enterprise Linux 6/cups Red Hat Enterprise Linux 7/cups	Red Hat	Medium	No fix reported	Not recorded
cups: Cupsd Listen arbitrary chmod 0140777CVE-2024-35235	Red Hat Enterprise Linux 6/cups Red Hat Enterprise Linux 7/cups	Red Hat	Medium	No fix reported	Not recorded
cups: libppd: remote command injection via attacker controlled data in PPD fileCVE-2024-47175	Red Hat Enterprise Linux 7/cups	Red Hat	High	No fix reported	Not recorded
cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoSCVE-2025-58364	Red Hat Enterprise Linux 6/cups Red Hat Enterprise Linux 7/cups	Red Hat	Medium	No fix reported	Not recorded
CUPS: Local denial-of-service via cupsd.conf update and related issuesCVE-2025-61915	Red Hat Enterprise Linux 6/cups Red Hat Enterprise Linux 7/cups	Red Hat	Medium	No fix reported	Not recorded
cups: Slow client communication leads to a possible DoS attackCVE-2025-58436	Red Hat Enterprise Linux 6/cups Red Hat Enterprise Linux 7/cups	Red Hat	Medium	No fix reported	Not recorded
cups: OpenPrinting CUPS: Authorization bypass via case-insensitive username comparisonCVE-2026-27447	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: OpenPrinting CUPS: Privilege escalation via arbitrary file overwrite due to coerced authenticationCVE-2026-34990	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: OpenPrinting CUPS: Denial of Service via path traversal in RSS notifierCVE-2026-34978	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: OpenPrinting CUPS: Denial of Service via heap-based buffer overflow in job attribute processingCVE-2026-34979	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the networkCVE-2026-34980	Red Hat Enterprise Linux 6/cups Red Hat Enterprise Linux 7/cups	Red Hat	Medium	No fix reported	Not recorded
cups: CUPS: Denial of Service via integer underflow in IPP attribute handlingCVE-2026-39314	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: CUPS: Denial of Service and potential arbitrary code execution via use-after-free vulnerability when deleting temporary printers.CVE-2026-39316	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded