Threats Tagged 'cve-2026-64611'

This update for libcupsfilters fixes the following issues: - CVE-2026-64611: infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field (bsc#1273145). - CVE-2026-64612: malformed PNG aborts CUPS image filter process (bsc#1273146).

Two vulnerabilities in libcupsfilters affect Red Hat Enterprise Linux 10 and SUSE products. CVE-2026-64611 is an infinite-loop CPU exhaustion denial-of-service triggered by an empty MDL field in the cfIEEE1284NormalizeMakeModel function. CVE-2026-64612 causes the CUPS image filter process to abort when processing a malformed PNG file. Security updates addressing these issues have been released by Red Hat and SUSE.

A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially crafted printer advertisement, leading to denial of service.

Multiple security vulnerabilities were identified and fixed in the cups-filters and cups-browsed packages affecting Red Hat Enterprise Linux 9 platforms. These include infinite-loop CPU exhaustion, denial of service via malformed PNG images, lack of input sanitization in printer attribute handling, and remote command injection through PPD files. A security update is available to remediate these issues.

Multiple security vulnerabilities have been identified and fixed in the cups-filters package used in Red Hat Enterprise Linux. These include denial-of-service via infinite loops, malformed PNG causing filter process aborts, input sanitization issues leading to potential remote command injection, and risks related to cups-browsed auto-creating print queues from untrusted network data. The update separates cups-browsed into its own sub-package to allow removal and reduce exposure to generic network-based risks. These issues affect various versions of Red Hat Enterprise Linux and related distributions.