Threats Tagged 'cve-2026-34980'

Multiple security vulnerabilities affecting the CUPS printing system have been addressed in updates culminating in version 2.4.19. These vulnerabilities include authorization bypass, path traversal, heap overflow, potential remote code execution, information disclosure, and denial of service issues. The update fixes several bugs and security flaws that could impact print job handling and system stability.

A moderate severity vulnerability in the Common UNIX Printing System (CUPS) allows anonymous Print-Job requests to reach the 'lp' code execution over the network via a shared PostScript queue. This affects Red Hat Enterprise Linux versions 8 and 9 in specified ranges. A security update from Red Hat is available to address this vulnerability.

This update includes the following RPMs: cups: * cups-2.4.17-1.hum1 (aarch64, x86_64) * cups-client-2.4.17-1.hum1 (aarch64, x86_64) * cups-devel-2.4.17-1.hum1 (aarch64, x86_64) * cups-filesystem-2.4.17-1.hum1 (noarch) * cups-ipptool-2.4.17-1.hum1 (aarch64, x86_64) * cups-libs-2.4.17-1.hum1 (aarch64, x86_64) * cups-lpd-2.4.17-1.hum1 (aarch64, x86_64) * cups-printerapp-2.4.17-1.hum1 (aarch64, x86_64) * cups-2.4.17-1.hum1.src (src)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a shared target queue, an unauthorized client can send a Print-Job to that shared PostScript queue without authentication. The server accepts a page-border value supplied as textWithoutLanguage, preserves an embedded newline through option escaping and reparse, and then reparses the resulting second-line PPD: text as a trusted scheduler control record. A follow-up raw print job can therefore make the server execute an attacker-chosen existing binary such as /usr/bin/vim as lp. At time of publication, there are no publicly available patches.