Skip to content
OpenAdvisories
Medium USN-7897-1 1 CVE

cups vulnerability

Published Nov 27, 2025 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that CUPS incorrectly handled input from users in the web
configuration settings. An attacker could use this issue to insert
malicious configuration options, causing a denial of service or possibly
executing arbitrary code.

Fixed packages 6

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS cups 2.4.1op1-1ubuntu4.15
Ubuntu · 24.04 LTS 24.04:LTS cups 2.4.7-1.2ubuntu7.7
Ubuntu · 25.10 cups 2.4.12-0ubuntu3.3
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS cups 2.1.3-4ubuntu0.11+esm11
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS cups 2.2.7-1ubuntu2.10+esm9
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS cups 2.3.1-9ubuntu1.9+esm3

Vulnerabilities 1

  • Medium 6.0
    CVE-2025-61915

    OpenPrinting CUPS vulnerable to stack based out-of-bound write

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which ru…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2025-61915