Search for packages
| purl | pkg:deb/debian/cups@2.4.10-3%2Bdeb13u2?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-jy1y-e1nk-p3b4
Aliases: CVE-2025-61915 |
CUPS: Local denial-of-service via cupsd.conf update and related issues |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-wr17-e776-bqh1
Aliases: CVE-2025-58436 |
cups: Slow client communication leads to a possible DoS attack |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1z9b-trb7-2ubp | KPdf and KWord both include vulnerable Xpdf code to handle PDF files, making them vulnerable to the execution of arbitrary code. |
CVE-2005-3626
|
| VCID-2chf-23mc-d3dn | cups: access to uninitialized buffer in ipp.c |
CVE-2020-10001
|
| VCID-2weh-q66p-8bdg | Multiple vulnerabilities have been found in CUPS, some of which may allow execution of arbitrary code or local privilege escalation. |
CVE-2010-0302
|
| VCID-35gf-189e-3ud4 | security update |
CVE-2014-5029
|
| VCID-39f1-22a5-c7aw | Multiple vulnerabilities have been found in cups-filters, the worst of which could lead to arbitrary code execution. |
CVE-2015-3258
|
| VCID-3ame-feez-yqhc | security update |
CVE-2015-1158
|
| VCID-3cy2-awj3-hqhn | cups: memory leak handling IPP browse requests |
CVE-2008-0596
|
| VCID-3etj-2m21-ffa1 | cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS |
CVE-2025-58364
|
| VCID-43eg-4nf5-dubb | Multiple vulnerabilities have been found in CUPS, the worst of which could result in the arbitrary execution of code. |
CVE-2018-4183
|
| VCID-4464-npdy-z3b7 | Several remotely exploitable bugs have been found in CUPS, which allow remote execution of arbitrary code. |
CVE-2008-5286
|
| VCID-44ju-8618-vqht | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain configurations, a remote attacker may be able to submit arbitrary print jobs. |
CVE-2019-8842
|
| VCID-48ht-j7ga-9ugq | Multiple vulnerabilities have been found in CUPS, some of which may allow execution of arbitrary code or local privilege escalation. |
CVE-2011-3170
|
| VCID-4bxg-5tnm-y3hw | Multiple vulnerabilities have been found in cups-filters, worst of which allows remote attackers to execute arbitrary code. |
CVE-2013-6476
|
| VCID-4cfw-stbc-h3dx | Multiple vulnerabilities have been discovered in CUPS, allowing for the remote execution of arbitrary code and a Denial of Service. |
CVE-2007-6358
|
| VCID-4he8-q3nc-3bf7 | Multiple errors in CUPS might allow for the remote execution of arbitrary code or DNS rebinding attacks. |
CVE-2009-0163
|
| VCID-4p26-wkq3-v3b2 | KPdf and KWord both include vulnerable Xpdf code to handle PDF files, making them vulnerable to the execution of arbitrary code. |
CVE-2005-3628
|
| VCID-4q3f-hdyp-wue3 | cups: password disclosure via debug log |
CVE-2008-1033
|
| VCID-5q1h-7uk2-nkhx | Multiple vulnerabilities have been discovered in Xpdf, GPdf, CUPS and Poppler potentially resulting in the execution of arbitrary code. |
CVE-2005-3193
|
| VCID-6mus-21kz-uuhz | cups: Session cookie generated by the CUPS web interface is easy to guess |
CVE-2018-4300
|
| VCID-7gbc-682w-5fdq | Multiple vulnerabilities have been found in CUPS, some of which may allow execution of arbitrary code or local privilege escalation. |
CVE-2010-0540
|
| VCID-7wg4-sc9v-bffk | cups: Information leak through Cups-Get-Document operation |
CVE-2023-32360
|
| VCID-7x99-rwuc-dyh9 | security flaw |
CVE-2002-1384
|
| VCID-843p-8xve-nfer | Multiple vulnerabilities have been found in cups-filters, worst of which allows remote attackers to execute arbitrary code. |
CVE-2013-6474
|
| VCID-8ac2-74af-wkbw | Multiple vulnerabilities have been discovered in CUPS, allowing for the remote execution of arbitrary code and a Denial of Service. |
CVE-2008-0053
|
| VCID-8p6s-k3gc-z7fr | cups: 'Listen localhost:631' option not honoured correctly on IPv6-enabled systems when systemd used for CUPS socket activation |
CVE-2012-6094
|
| VCID-8uds-zs9k-47en | Multiple vulnerabilities have been discovered in Xpdf, GPdf, CUPS and Poppler potentially resulting in the execution of arbitrary code. |
CVE-2005-3191
|
| VCID-8yv6-g189-vugt | cups: DoS (daemon crash) caused by the large number of subscriptions |
CVE-2008-5183
|
| VCID-993k-m3sq-gufu | cups: Authentication Bypass in CUPS Authorization Handling |
CVE-2025-58060
|
| VCID-9e1p-qt31-xffb | pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pstopdf.log temporary file, a different vulnerability than CVE-2001-1333. |
CVE-2008-5377
|
| VCID-9m44-agjf-buc1 | Multiple vulnerabilities have been discovered in CUPS, allowing for the remote execution of arbitrary code and a Denial of Service. |
CVE-2007-4045
|
| VCID-adve-thnd-u3gf | CUPS contains a boundary checking error that might lead to the execution of arbitrary code. |
CVE-2007-4351
|
| VCID-akuy-agys-pkc1 | security flaw |
CVE-2004-0558
|
| VCID-am36-6m5v-fkba | cups: libppd: remote command injection via attacker controlled data in PPD file |
CVE-2024-47175
|
| VCID-anr5-gc12-e7dr | security update |
CVE-2014-3537
|
| VCID-apyh-1uza-pffa | In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-111210196 |
CVE-2019-2228
|
| VCID-azma-9b5q-57b3 | cups: insecure permissions of /var/log/cups allows for symlink attacks |
CVE-2021-25317
|
| VCID-aznw-8yer-xfhf | Multiple vulnerabilities have been discovered in CUPS, the worst of which can lead to arbitrary code execution. |
CVE-2023-34241
|
| VCID-b3we-kawj-dkbh | cups: DoS (stop, crash) by renewing CUPS browse packets |
CVE-2009-1196
|
| VCID-b5ea-pbr6-7uep | cups: improper use of the 'guest' username in the web UI, when user not logged on to the server |
CVE-2008-5184
|
| VCID-bj8b-t1mc-zfd3 | Multiple vulnerabilities have been found in CUPS, some of which may allow execution of arbitrary code or local privilege escalation. |
CVE-2010-0542
|
| VCID-bkr4-sab1-5ka2 | KPdf and KWord both include vulnerable Xpdf code to handle PDF files, making them vulnerable to the execution of arbitrary code. |
CVE-2005-3627
|
| VCID-bzht-vhe3-y7bf | Multiple vulnerabilities have been found in CUPS, the worst of which could result in the arbitrary execution of code. |
CVE-2018-4180
|
| VCID-cf81-58ju-bqaz | cups: cross-site scripting flaw fixed in the 1.7.2 release |
CVE-2014-2856
|
| VCID-ctb2-8h4y-vybd | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-0166
|
| VCID-d6f7-xjfh-5ygd | security flaw |
CVE-2004-1268
|
| VCID-dgb8-nes9-8fb7 | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-0147
|
| VCID-dqz1-7j8m-9ueh | security flaw |
CVE-2004-0923
|
| VCID-durs-kj4r-jbf2 | security flaw |
CVE-2005-2097
|
| VCID-ed99-uccv-d7bh | Multiple vulnerabilities have been found in cups-filters, the worst of which could lead to arbitrary code execution. |
CVE-2015-3279
|
| VCID-enxz-181c-cfgj | Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 allows local users to gain privileges via unspecified vectors. |
CVE-2009-2807
|
| VCID-ev9c-v5dv-37fb | cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c |
CVE-2020-3898
|
| VCID-fby6-8f6z-63fw | security update |
CVE-2014-5030
|
| VCID-fct6-695j-t7bs | PDFKit and ImageKits are vulnerable to an integer overflow and a stack overflow allowing for the user-assisted execution of arbitrary code. |
CVE-2007-3387
|
| VCID-fkyp-m1p9-mfhy | cups: Invalid usernames handled in scheduler/ipp.c:add_job() allow remote attackers to cause a denial of service |
CVE-2017-18248
|
| VCID-fpbv-zqer-w7c3 | Multiple vulnerabilities have been found in CUPS, some of which may allow execution of arbitrary code or local privilege escalation. |
CVE-2010-2431
|
| VCID-g2x8-pm39-sfer | Multiple vulnerabilities have been found in CUPS, some of which may allow execution of arbitrary code or local privilege escalation. |
CVE-2010-0393
|
| VCID-gje5-c2d5-qbaq | security flaw |
CVE-2002-1371
|
| VCID-gk6d-e37p-rqbv | security flaw |
CVE-2003-0788
|
| VCID-gvr9-nyym-67d4 | Multiple vulnerabilities have been discovered in CUPS, allowing for the remote execution of arbitrary code and a Denial of Service. |
CVE-2008-1373
|
| VCID-hunf-nefn-s7a5 | security flaw |
CVE-2002-1369
|
| VCID-jb2g-gyt5-8kd3 | Multiple vulnerabilities have been discovered in CUPS, allowing for the remote execution of arbitrary code and a Denial of Service. |
CVE-2008-0882
|
| VCID-jcsq-esrs-zyes | security flaw |
CVE-2004-1270
|
| VCID-jy8g-g6m3-pygt | security flaw |
CVE-2004-2154
|
| VCID-jz8v-ckq8-5ug7 | Multiple vulnerabilities have been discovered in CUPS, allowing for the remote execution of arbitrary code and a Denial of Service. |
CVE-2007-5849
|
| VCID-k4yw-jg6v-1bcc | cups: Cupsd Listen arbitrary chmod 0140777 |
CVE-2024-35235
|
| VCID-kgk7-hqby-wkez | Poppler and various KDE components are vulnerable to multiple memory management issues possibly resulting in the execution of arbitrary code. |
CVE-2007-4352
|
| VCID-m5tc-yrms-zuay | security flaw |
CVE-2005-0206
|
| VCID-ma98-ankz-ska4 | Multiple vulnerabilities have been found in CUPS, the worst of which could result in the arbitrary execution of code. |
CVE-2018-4182
|
| VCID-mcmb-bvw9-dba5 | Multiple vulnerabilities have been found in cups-filters, worst of which allows remote attackers to execute arbitrary code. |
CVE-2013-6475
|
| VCID-mg1z-d7y8-dfaj | KPdf and KWord both include vulnerable Xpdf code to handle PDF files, making them vulnerable to the execution of arbitrary code. |
CVE-2005-3624
|
| VCID-mg57-dqwb-vqee | security flaw |
CVE-2004-1269
|
| VCID-mp2s-4x2a-h7fq | Multiple vulnerabilities have been found in CUPS, some of which may allow execution of arbitrary code or local privilege escalation. |
CVE-2009-3553
|
| VCID-mtwe-dgnd-c3fj | cups: IPP_TAG_UNSUPPORTED handling NULL pointer dereference DoS |
CVE-2009-0949
|
| VCID-mtzd-538p-kbhm | A vulnerability in CUPS may allow for arbitrary file access. |
CVE-2012-5519
|
| VCID-mvr1-n5d7-zbat | security flaw |
CVE-2002-1383
|
| VCID-mybj-wn6t-aucs | cups: dereference of free'd memory handling IPP browse requests |
CVE-2008-0597
|
| VCID-myv2-xrn1-nbf6 | security flaw |
CVE-2005-2874
|
| VCID-n7sa-m9h6-cqbv | security flaw |
CVE-2004-1125
|
| VCID-p3zu-wguk-e3h3 | security flaw |
CVE-2002-1367
|
| VCID-p8gy-dd3u-uqh4 | Multiple vulnerabilities have been discovered in CUPS, the worst of which can lead to arbitrary code execution. |
CVE-2022-26691
MNDT-2022-0026 |
| VCID-psw3-kpv9-nbgp | Several remotely exploitable bugs have been found in CUPS, which allow remote execution of arbitrary code. |
CVE-2008-3639
|
| VCID-pwkd-sgtt-1bef | cups: DNS rebinding attacks via incorrect whitelist |
CVE-2017-18190
|
| VCID-q8a8-fd7r-1kg7 | Multiple vulnerabilities have been discovered in CUPS, the worst of which can lead to arbitrary code execution. |
CVE-2023-32324
|
| VCID-qjzr-avt1-fyfd | xpdf: multiple integer overflows |
CVE-2009-0791
|
| VCID-qway-gm1y-yqcg | security flaw |
CVE-2002-1368
|
| VCID-qxwq-vp9g-ukca | In ippSetValueTag of ipp.c in Android 8.0, 8.1 and 9, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the printer service with no additional execution privileges needed. User interaction is not needed for exploitation. |
CVE-2019-2180
|
| VCID-rdkz-72eg-7ubd | security flaw |
CVE-2005-0064
|
| VCID-rkdd-spkc-y7gq | Multiple vulnerabilities have been discovered in CUPS, allowing for the remote execution of arbitrary code and a Denial of Service. |
CVE-2008-0047
|
| VCID-s8wg-jbst-vqc3 | security flaw |
CVE-2004-1267
|
| VCID-sv3r-4tym-qua5 | Poppler and various KDE components are vulnerable to multiple memory management issues possibly resulting in the execution of arbitrary code. |
CVE-2007-5393
|
| VCID-txsp-9r9g-a3cp | Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument. |
CVE-2001-1508
|
| VCID-u7u6-xk3g-a3ce | Several remotely exploitable bugs have been found in CUPS, which allow remote execution of arbitrary code. |
CVE-2008-3640
|
| VCID-ucmb-we3r-aqcd | security update |
CVE-2015-1159
|
| VCID-ujum-g6at-v7hf | CUPS buffer overflow |
CVE-2007-5848
|
| VCID-ujz5-t5xc-83e7 | Multiple stack-based buffer overflows in the phpcups PHP module for CUPS 1.1.23rc1 might allow context-dependent attackers to execute arbitrary code via vectors that result in long function parameters, as demonstrated by the cups_get_dest_options function in phpcups.c. |
CVE-2005-4873
|
| VCID-uka8-ug6a-dfg8 | cups: incomplete fix for CVE-2004-0888 / CVE-2005-0206 |
CVE-2008-1374
|
| VCID-ukec-69r2-xbef | A buffer overflow in CUPS might allow remote attackers to execute arbitrary code. |
CVE-2014-9679
|
| VCID-uqp7-5pb9-w7cg | Multiple vulnerabilities have been found in CUPS, some of which may allow execution of arbitrary code or local privilege escalation. |
CVE-2010-1748
|
| VCID-ur43-jbhj-k7bk | Multiple vulnerabilities have been found in CUPS, some of which may allow execution of arbitrary code or local privilege escalation. |
CVE-2010-2432
|
| VCID-utex-65f9-53cq | KPdf and KWord both include vulnerable Xpdf code to handle PDF files, making them vulnerable to the execution of arbitrary code. |
CVE-2005-3625
|
| VCID-uzg5-a999-afhp | security update |
CVE-2015-2305
|
| VCID-vca3-gr6w-bkc6 | A vulnerability in CUPS might allow for the execution of arbitrary code or a Denial of Service. |
CVE-2008-1722
|
| VCID-vmjh-9kbz-qkh6 | cups: Several XSS flaws in forms processed by CUPS web interface |
CVE-2009-2820
|
| VCID-vx54-r2dt-8ue5 | Multiple vulnerabilities have been discovered in CUPS, the worst of which can lead to arbitrary code execution. |
CVE-2023-4504
|
| VCID-w17y-dvuq-7ba6 | Multiple vulnerabilities have been found in CUPS, the worst of which could result in the arbitrary execution of code. |
CVE-2018-4181
|
| VCID-wjht-u5u1-kkas | cups: lppasswd vulnerability allows data access to unprivileged user |
CVE-2013-6891
|
| VCID-wpgs-8fw5-wbhe | Poppler and various KDE components are vulnerable to multiple memory management issues possibly resulting in the execution of arbitrary code. |
CVE-2007-5392
|
| VCID-wqu4-wys6-hfbb | cups: stack-buffer-overflow in libcups's asn1_get_type function |
CVE-2019-8675
|
| VCID-x49u-x3vn-f7gq | security flaw |
CVE-2004-0888
|
| VCID-xp1f-4p3v-67ad | Multiple vulnerabilities have been found in CUPS, some of which may allow execution of arbitrary code or local privilege escalation. |
CVE-2010-2941
|
| VCID-xqh5-sxfb-gueh | Multiple vulnerabilities have been discovered in Xpdf, GPdf, CUPS and Poppler potentially resulting in the execution of arbitrary code. |
CVE-2005-3192
|
| VCID-xyhn-ukg4-pyfm | Several remotely exploitable bugs have been found in CUPS, which allow remote execution of arbitrary code. |
CVE-2008-3641
|
| VCID-xzfh-46xf-p7gh | security flaw |
CVE-2002-1366
|
| VCID-y5s2-9j2f-jqa9 | security flaw |
CVE-2003-0195
|
| VCID-y7a9-2p1n-z7fx | Multiple vulnerabilities have been found in GIMP, the worst of which allow execution of arbitrary code or Denial of Service. |
CVE-2011-2896
|
| VCID-yfs7-zgxf-43hy | Multiple vulnerabilities have been found in AMD64 x86 emulation base libraries, the worst of which may allow remote execution of arbitrary code. |
CVE-2007-0720
|
| VCID-ymyr-d96v-dff9 | security flaw |
CVE-2002-1372
|
| VCID-ynvq-nzrq-9bca | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-0146
|
| VCID-yyrd-qt22-w3f5 | security update |
CVE-2014-5031
|
| VCID-zjj3-g2d7-c3gd | Multiple vulnerabilities have been found in CUPS, the worst of which could result in the arbitrary execution of code. |
CVE-2017-15400
|
| VCID-zm2g-nduw-tfcy | Multiple errors in CUPS might allow for the remote execution of arbitrary code or DNS rebinding attacks. |
CVE-2009-0164
|
| VCID-zt43-htwu-kfde | Multiple vulnerabilities have been found in CUPS, the worst of which could result in the arbitrary execution of code. |
CVE-2018-6553
|
| VCID-zxp7-6d69-tfhm | cups: stack-buffer-overflow in libcups's asn1_get_packed function |
CVE-2019-8696
|