132 results · Feed
-
Unscored —
In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictio…
-
Unscored —
AppArmor cupsd Sandbox Bypass Due to Use of Hard Links
The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.…
-
Unscored —
The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote a…
-
Unscored —
A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attack…
-
Unscored —
Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to …
-
Unscored —
The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might…
-
Unscored —
Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70…
-
Unscored —
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a de…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS …
-
Unscored —
The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-v…
-
Unscored —
Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers …
-
Unscored —
The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a fi…
-
Unscored —
The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote att…
-
Unscored —
CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3)…
-
Unscored —
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack …
-
Unscored —
Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allow…
-
Unscored —
Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cup…
-
Unscored —
The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.…
-
Unscored —
Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to ex…
-
Unscored —
lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary fi…
-
Unscored —CVE-2012-5519 Public exploit
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrato…
-
Unscored —
The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word …
-
Unscored —CVE-2011-2896 EPSS 12%
The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in t…
-
Unscored —
ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string dat…
-
Unscored —
The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not p…
-
Unscored —
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary fil…
-
Unscored —
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check th…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10…
-
Unscored —CVE-2010-1748 Public exploit
The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS …
-
Unscored —
The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an envir…
-
Unscored —
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in schedu…
-
Unscored —
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in schedu…
-
Unscored —CVE-2009-2820 Public exploit
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly …
-
Unscored —
Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, a…
-
Unscored —
The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request…
-
Unscored —
The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a deni…
-
Unscored —
The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it eas…
-
Unscored —
Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denia…
-
Unscored —CVE-2008-5377 Public exploit
pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pstopdf.log temp…
-
Unscored —
Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote attackers to execute arbi…