Red Hat Enterprise Linux 8/cups

Red Hat · Package

18 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
cups: cups: Arbitrary file overwrite via insecure temporary file handlingCVE-2026-55480	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: insecure permissions of /var/log/cups allows for symlink attacksCVE-2021-25317	Red Hat Enterprise Linux 6/cups Red Hat Enterprise Linux 7/cups	Red Hat	Low	No fix reported	Not recorded
libppd: Postscript Parsing Heap OverflowCVE-2023-4504	Red Hat Enterprise Linux 6/cups Red Hat Enterprise Linux 7/cups	Red Hat	Medium	No fix reported	Not recorded
cups: OpenPrinting CUPS: Authorization bypass via case-insensitive username comparisonCVE-2026-27447	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: OpenPrinting CUPS: Privilege escalation via arbitrary file overwrite due to coerced authenticationCVE-2026-34990	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: OpenPrinting CUPS: Denial of Service via path traversal in RSS notifierCVE-2026-34978	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: OpenPrinting CUPS: Denial of Service via heap-based buffer overflow in job attribute processingCVE-2026-34979	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: CUPS: Denial of Service via integer underflow in IPP attribute handlingCVE-2026-39314	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: CUPS: Denial of Service and potential arbitrary code execution via use-after-free vulnerability when deleting temporary printers.CVE-2026-39316	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: CUPS: Information disclosure via crafted SNMP responseCVE-2026-41079	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Low	No fix reported	Not recorded
cups: OpenPrinting CUPS: Heap out-of-bounds read in cupsUTF32ToUTF8() via missing source-length boundCVE-2026-87875	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: OpenPrinting CUPS: Remaining case-insensitive username matching in scheduler side paths (CVE-2026-27447 follow-up)CVE-2026-87876	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Low	No fix reported	Not recorded
cups: cups: Denial of Service via improper job submission timeout handlingCVE-2026-107885	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Low	No fix reported	Not recorded
cups: cups: Denial of Service via double-free in printer class managementCVE-2026-107886	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 7/cups	Red Hat	Low	No fix reported	Not recorded
cups: CUPS: Denial of Service via deleted temporary printerCVE-2026-107888	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: cups: Denial of Service via repeated IPP group tagsCVE-2026-107890	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Low	No fix reported	Not recorded
cups: NULL pointer dereference via embedded job ticket comments allows remote denial of serviceCVE-2026-107655	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: cups: argument injection in mailto notifier via notify-recipient-uriCVE-2026-105326	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 8/cups	Red Hat	Low	No fix reported	Not recorded