TI-2018-04829 CVE-2018-6553 · GHSA-2f8v-v7q3-8gqv
AppArmor cupsd Sandbox Bypass Due to Use of Hard Links
Priority LOW 38
The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links.
Vulnerabilities
10 records
TI-2014-06781 CVE-2014-8166 · GHSA-fw6x-vp3m-9q59
The browsing feature in the server in CUPS does not filter ANSI escape sequences from…
Priority MEDIUM 44
The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbitrary code via a crafted printer name.
TI-2015-01054 CVE-2015-1159 · GHSA-pmc2-2vx8-fmwf
Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c…
Priority LOW 30
Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter t…
TI-2015-01053 CVE-2015-1158 · GHSA-f3f2-vc32-jrrx
The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect…
Priority HIGH 66
The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption f…
TI-2008-01651 CVE-2008-1722 · GHSA-v23p-4xpj-h834
Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS…
Priority LOW 24
Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service (crash) and trigger memory corruption, as demonstrated via a crafted PNG image.
TI-2005-04603 CVE-2005-4873 · GHSA-7c52-ww2j-7v63
Multiple stack-based buffer overflows in the phpcups PHP module for CUPS 1.1.23rc1 might…
Priority LOW 37
Multiple stack-based buffer overflows in the phpcups PHP module for CUPS 1.1.23rc1 might allow context-dependent attackers to execute arbitrary code via vectors that result in long function parameters, as demonstrated by…
TI-2008-00038 CVE-2008-0047 · GHSA-955r-8v94-5rcf
Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other…
Priority MEDIUM 50
Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute…
TI-2008-00848 CVE-2008-0882 · GHSA-vcjx-xf8c-qxqm
Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote…
Priority MEDIUM 52
Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cu…
TI-2007-04211 CVE-2007-4351 · GHSA-r79v-84jh-ff36
Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote…
Priority MEDIUM 53
Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (I…
TI-2007-00703 CVE-2007-0720 · GHSA-vxfh-xhpf-gvm6
The CUPS service on multiple platforms allows remote attackers to cause a denial of…
Priority LOW 31
The CUPS service on multiple platforms allows remote attackers to cause a denial of service (service hang) via a "partially-negotiated" SSL connection, which prevents other requests from being accepted.