Threat Intelligence Database

A vulnerability in libcupsfilters and cups-filters allows an unauthenticated attacker to cause the CUPS image filter process to abort by submitting a specially crafted malformed PNG print job. This results in a denial of service affecting only the in-flight print job, without impacting overall CUPS service stability. The flaw arises because the PNG image reading function does not install an error recovery handler in the libpng reader. Red Hat has rated this issue as Moderate severity and has released updates for Red Hat Enterprise Linux 10 to address it.

A vulnerability in libcupsfilters causes the cfIEEE1284NormalizeMakeModel() function to enter an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field. This results in sustained CPU consumption and can be exploited by a network-adjacent attacker broadcasting a crafted printer advertisement, leading to denial of service. The issue affects Red Hat Enterprise Linux 10 and related variants. The cups-browsed service, which uses this component, is disabled by default in RHEL, reducing exposure. A security update addressing this flaw is available from Red Hat.