Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-4jhb-rh62-4ke5

Summary cups: CUPS: Denial of Service and potential arbitrary code execution via use-after-free vulnerability when deleting temporary printers.

Aliases

alias	CVE-2026-39316

Fixed_packages

url	pkg:deb/debian/cups@2.4.17-1?distro=trixie
purl	pkg:deb/debian/cups@2.4.17-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/cups@2.4.17-1%3Fdistro=trixie

url	pkg:deb/debian/cups@2.4.18-1?distro=trixie
purl	pkg:deb/debian/cups@2.4.18-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/cups@2.4.18-1%3Fdistro=trixie

Affected_packages

url pkg:deb/debian/cups@2.3.3op2-3%2Bdeb11u8?distro=trixie

purl pkg:deb/debian/cups@2.3.3op2-3%2Bdeb11u8?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1wfz-u1qd-8uce

vulnerability	VCID-4jhb-rh62-4ke5

vulnerability	VCID-8vbg-dcp3-n7fp

vulnerability	VCID-9cd4-uus2-97c1

vulnerability	VCID-gxr3-588f-ubh9

vulnerability	VCID-mwkj-qy8g-vbgj

vulnerability	VCID-q3af-s63q-m3hf

vulnerability	VCID-shvg-s168-qqb5

vulnerability	VCID-vzg1-7brk-f3hj

vulnerability	VCID-zsc7-csmh-cqdv

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cups@2.3.3op2-3%252Bdeb11u8%3Fdistro=trixie

url pkg:deb/debian/cups@2.4.2-3%2Bdeb12u9?distro=trixie

purl pkg:deb/debian/cups@2.4.2-3%2Bdeb12u9?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1wfz-u1qd-8uce

vulnerability	VCID-4jhb-rh62-4ke5

vulnerability	VCID-8vbg-dcp3-n7fp

vulnerability	VCID-9cd4-uus2-97c1

vulnerability	VCID-gxr3-588f-ubh9

vulnerability	VCID-mwkj-qy8g-vbgj

vulnerability	VCID-q3af-s63q-m3hf

vulnerability	VCID-shvg-s168-qqb5

vulnerability	VCID-vzg1-7brk-f3hj

vulnerability	VCID-zsc7-csmh-cqdv

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cups@2.4.2-3%252Bdeb12u9%3Fdistro=trixie

url pkg:deb/debian/cups@2.4.10-3%2Bdeb13u2?distro=trixie

purl pkg:deb/debian/cups@2.4.10-3%2Bdeb13u2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1wfz-u1qd-8uce

vulnerability	VCID-4jhb-rh62-4ke5

vulnerability	VCID-8vbg-dcp3-n7fp

vulnerability	VCID-9cd4-uus2-97c1

vulnerability	VCID-gxr3-588f-ubh9

vulnerability	VCID-mwkj-qy8g-vbgj

vulnerability	VCID-q3af-s63q-m3hf

vulnerability	VCID-shvg-s168-qqb5

vulnerability	VCID-vzg1-7brk-f3hj

vulnerability	VCID-zsc7-csmh-cqdv

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cups@2.4.10-3%252Bdeb13u2%3Fdistro=trixie

url pkg:rpm/redhat/cups-main@2.4.17-1?arch=hum1

purl pkg:rpm/redhat/cups-main@2.4.17-1?arch=hum1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1wfz-u1qd-8uce

vulnerability	VCID-4jhb-rh62-4ke5

vulnerability	VCID-5rcm-bxt2-cuev

vulnerability	VCID-8vbg-dcp3-n7fp

vulnerability	VCID-9cd4-uus2-97c1

vulnerability	VCID-dx41-kx6b-dycz

vulnerability	VCID-p19w-sxpq-pygs

vulnerability	VCID-q3af-s63q-m3hf

vulnerability	VCID-shvg-s168-qqb5

vulnerability	VCID-vzg1-7brk-f3hj

vulnerability	VCID-zsc7-csmh-cqdv

vulnerability	VCID-zta3-u1xk-vubz

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cups-main@2.4.17-1%3Farch=hum1

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-39316.json

reference_id

reference_type

scores

value	4.0
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-39316.json

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1133183
reference_id	1133183
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1133183

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2456120
reference_id	2456120
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2456120

reference_url	https://access.redhat.com/errata/RHSA-2026:8814
reference_id	RHSA-2026:8814
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:8814

Weaknesses

cwe_id	825
name	Expired Pointer Dereference
description	The product dereferences a pointer that contains a location for memory that was previously valid, but is no longer valid.

Exploits

Severity_range_score 4.0 - 4.0

Exploitability 0.5

Weighted_severity 3.6

Risk_score 1.8

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4jhb-rh62-4ke5

Vulnerability Instance