Skip to content
OpenAdvisories
Unscored USN-2293-1 1 CVE

cups vulnerability

Published Jul 21, 2014 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Francisco Alonso discovered that the CUPS web interface incorrectly
validated permissions on rss files. A local attacker could possibly use
this issue to bypass file permissions and read arbitrary files, possibly
leading to a privilege escalation.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS cups 1.7.2-0ubuntu1.1

Vulnerabilities 1

  • Unscored —
    CVE-2014-3537

    The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack …

    cups cups Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-3537