Threat Intelligence Database

A moderate severity vulnerability in the Common UNIX Printing System (CUPS) allows anonymous Print-Job requests to reach the 'lp' code execution over the network via a shared PostScript queue. This affects Red Hat Enterprise Linux versions 8 and 9 in specified ranges. A security update from Red Hat is available to address this vulnerability.

Two security vulnerabilities affecting the Common UNIX Printing System (CUPS) in Red Hat Enterprise Linux 8 have been addressed. These include a local denial-of-service (DoS) vulnerability via cupsd.conf update (CVE-2025-61915) and a possible DoS attack caused by slow client communication (CVE-2025-58436). The update is rated as having moderate security impact. A patch is available from Red Hat to remediate these issues.

Two moderate severity vulnerabilities have been identified in the Common UNIX Printing System (CUPS) on Red Hat Enterprise Linux 10. These include a local denial-of-service via cupsd.conf update (CVE-2025-61915) and a potential denial-of-service caused by slow client communication (CVE-2025-58436). A security update addressing these issues is available from Red Hat.

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915) * cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A null pointer dereference vulnerability exists in the Common UNIX Printing System (CUPS) in the ipp_read_io() function, which can lead to a remote denial of service (DoS). This issue affects Red Hat Enterprise Linux 8 versions prior to 8.10.0. Red Hat has released a security update to address this vulnerability. The severity of this issue is rated as moderate by Red Hat, and no known exploits are reported in the wild.

A security vulnerability (CVE-2024-47175) in the Common UNIX Printing System (CUPS) libppd component allows remote command injection via attacker-controlled data in a PPD file. This affects Red Hat Enterprise Linux 8 versions prior to 8.10 across multiple architectures. Red Hat has issued a security update to address this low severity issue. The vulnerability involves command injection through maliciously crafted PPD files processed by the libppd library in CUPS. A patch is available and users are advised to update to the fixed package versions provided by Red Hat.

A security vulnerability (CVE-2024-35235) has been identified in the Common UNIX Printing System (CUPS) affecting Red Hat Enterprise Linux 9.2 Extended Update Support and related variants. The issue involves an arbitrary chmod operation with mode 0140777 in the cups daemon's listen functionality. Red Hat has issued a security advisory with an update to address this moderate severity vulnerability.