OpenPrinting

Records34All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

OpenPrinting records in CISA KEV

No OpenPrinting vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cups 25 records HIGH Cups-filters 3 records MEDIUM Libcupsfilters 3 records HIGH Libppd 2 records HIGH Cpdb-libs 1 record HIGH Cups-browsed 1 record MEDIUM Ippusbxd Firmware 1 record HIGH

Records

34 records

TI-2023-16941 CVE-2023-34095

cpdb-libs vulnerable to buffer overflows via scanf

HIGH 82

cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends (CPDB) project.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01539 Published 2023-06-14 No fix listed CWE-121

TI-2024-31543 CVE-2024-47175

libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer

HIGH 78

CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.63607 Published 2024-09-26 Partial fix CWE-20

TI-2024-31458 CVE-2024-47076

libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server

HIGH 77

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks need…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.79896 Published 2024-09-26 Fixed CWE-20

TI-2025-35903 CVE-2025-58060

cups has Authentication bypass with AuthType Negotiate

HIGH 70

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1HIGH 8.0 Local No auth No interaction EPSS 0.01001 Published 2025-09-11 Partial fix · 2.4.13 CWE-287

TI-2023-17077 CVE-2023-34241

CUPS vulnerable to use-after-free in cupsdAcceptClient()

HIGH 70

OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.01383 Published 2023-06-22 Partial fix · 2.4.6 CWE-416

TI-2026-27200 CVE-2026-34978

Path traversal in OpenPrinting cups

HIGH 68

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00422 Published 2026-04-03 Partial fix CWE-22

TI-2023-04157 CVE-2023-4504

OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow

HIGH 66

Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00637 Published 2023-09-21 Partial fix · 2.4.6 CWE-122

TI-2024-30173 CVE-2024-45062 · GHSA-rxv3-g639-m9x9

Stack-based buffer overflow in OpenPrinting ippusbxd

HIGH 65

A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00353 Published 2025-08-19 No fix listed CWE-121

TI-2026-74874 CVE-2026-61702

Path traversal in OpenPrinting CUPS banner handling discloses files

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00424 Published 2026-10-15 Fixed in 2.4.20 CWE-22

TI-2026-27201 CVE-2026-34979

OpenPrinting CUPS: Heap overflow in `get_options()`

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00409 Published 2026-04-03 Partial fix CWE-122

TI-2025-38265 CVE-2025-61915

OpenPrinting CUPS vulnerable to stack based out-of-bound write

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00496 Published 2025-11-29 Partial fix · 2.4.15 CWE-124

TI-2024-23304 CVE-2024-35235

Cupsd Listen arbitrary chmod 0140777

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.02421 Published 2024-06-11 Partial fix CWE-252

TI-2026-69843 CVE-2026-107886

Double free in OpenPrinting CUPS printer-class management

MEDIUM 62

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00241 Published 2026-10-09 Partial fix · 2.4.20 CWE-415

TI-2025-36152 CVE-2025-58364

cups: Remote DoS via null dereference

MEDIUM 62

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0116 Published 2025-09-11 Partial fix · 2.4.13 CWE-20

TI-2026-28306 CVE-2026-39316

CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00184 Published 2026-04-07 Partial fix CWE-416

TI-2026-28304 CVE-2026-39314

CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0016 Published 2026-04-07 Partial fix CWE-191

TI-2026-21858 CVE-2026-27447

OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00295 Published 2026-04-03 Partial fix CWE-863

TI-2026-27202 CVE-2026-34980

OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network

MEDIUM 60

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 4.0MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.01652 Published 2026-04-03 Partial fix CWE-20

TI-2026-74871 CVE-2026-55480

Symlink race in CUPS PPD tempfile lets lp users overwrite root files

MEDIUM 59

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.7 Local High privileges No interaction EPSS 0.00202 Published 2026-10-15 Partial fix · 2.4.20 CWE-377

TI-2026-69846 CVE-2026-107890

NULL pointer dereference in OpenPrinting CUPS scheduler via print jobs

MEDIUM 58

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00149 Published 2026-10-09 Partial fix · 2.4.20 CWE-476

TI-2026-69842 CVE-2026-107885

OpenPrinting CUPS resource exhaustion in job submission timeout handling

MEDIUM 58

OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs().

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00147 Published 2026-10-09 Partial fix CWE-770

TI-2026-29716 CVE-2026-41079

OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.00409 Published 2026-04-24 Partial fix · 2.4.17 CWE-125

TI-2026-27212 CVE-2026-34990

OpenPrinting CUPS: Local print admin token disclosure using temporary printers

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 4.0MEDIUM 5.0 Local Low privileges No interaction EPSS 0.00295 Published 2026-04-03 Partial fix CWE-287

TI-2025-39914 CVE-2025-64524

CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution

MEDIUM 58

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00222 Published 2025-11-20 Fix deferred CWE-122

TI-2025-36195 CVE-2025-58436

OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00247 Published 2025-11-29 Partial fix · 2.4.15 CWE-400

Open these records in search →