Vulnerabilidades em OpenPrinting
33 resultadosAnálise Vexday
OpenPrinting registra 25 vulnerabilidades conhecidas na base, com apenas 1 classificada como crítica e nenhuma sob exploração ativa documentada no momento. A fraqueza predominante é heap buffer overflow (CWE-122), típica de software de sistemas baixo nível, mas a ausência de divulgações recentes sugere risco estável e sem pressão imediata de remediação.
CVE-2026-27447MEDIUMOpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookupEPSS 0.3%CVE-2025-58436MEDIUMOpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attackEPSS 0.2%CVE-2026-107886LOWOpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class meEPSS 0.2%CVE-2025-64503MEDIUM[BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftorasterEPSS 0.2%CVE-2025-64524LOWCUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code ExecutionEPSS 0.2%CVE-2026-55480MEDIUMCUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)EPSS 0.2%CVE-2026-55453LOWCUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-ripEPSS 0.2%CVE-2026-39316MEDIUMCUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointerEPSS 0.2%CVE-2026-55467LOWCUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)EPSS 0.2%CVE-2026-39314MEDIUMCUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`EPSS 0.2%CVE-2026-107890LOWOpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing EPSS 0.1%CVE-2026-107885LOWOpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scEPSS 0.1%CVE-2026-107888MEDIUMOpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temEPSS 0.1%