Multiple vulnerabilities have been discovered in CUPS, the worst of which can lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 2.4.7 | >= 2.4.7 |
CUPS, the Common Unix Printing System, is a full-featured print server.
Multiple vulnerabilities have been discovered in CUPS. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-2.4.7"
Multiple vulnerabilities have been found in CUPS, the worst of which could result in the arbitrary execution of code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 2.2.8 | >= 2.2.8 |
CUPS, the Common Unix Printing System, is a full-featured print server.
Multiple vulnerabilities have been discovered in CUPS. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-2.2.8"
A buffer overflow in CUPS might allow remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 2.0.2-r1 | >= 2.0.2-r1 |
CUPS, the Common Unix Printing System, is a full-featured print server.
A vulnerability has been discovered in CUPS concerning the handling of compressed raster files.
A remote attacker could possibly execute arbitrary code with the privileges of the process.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-2.0.2-r1"
Multiple vulnerabilities have been found in CUPS, the worst of which could lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 2.0.3 | >= 2.0.3 |
CUPS, the Common Unix Printing System, is a full-featured print server.
Multiple vulnerabilities have been discovered in cups. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-2.0.3"
A vulnerability in CUPS may allow for arbitrary file access.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 1.6.2-r5 | >= 1.6.2-r5 |
CUPS, the Common Unix Printing System, is a full-featured print server.
Members of the lpadmin group have admin access to the web interface, where they can edit the config file and set some “dangerous” directives (like the logfilenames), which enable them to read or write files as the user running the CUPS webserver.
A local attacker could possibly exploit this vulnerability to read or write files as the user running the CUPS webserver.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-1.6.2-r5"
Multiple vulnerabilities have been found in CUPS, some of which may allow execution of arbitrary code or local privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 1.4.8-r1 | >= 1.4.8-r1 |
CUPS, the Common Unix Printing System, is a full-featured print server.
Multiple vulnerabilities have been discovered in CUPS. Please review the CVE identifiers referenced below for details.
A remote attacker may be able to execute arbitrary code using specially crafted streams, IPP requests or files, or cause a Denial of Service (daemon crash or hang). A local attacker may be able to gain escalated privileges or overwrite arbitrary files. Furthermore, a remote attacker may be able to obtain sensitive information from the CUPS process or hijack a CUPS administrator authentication request.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-1.4.8-r1"
NOTE: This is a legacy GLSA. Updates for all affected architectures are available since September 03, 2011. It is likely that your system is already no longer affected by this issue.
Multiple errors in CUPS might allow for the remote execution of arbitrary code or DNS rebinding attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 1.3.10 | >= 1.3.10 |
CUPS, the Common Unix Printing System, is a full-featured print server.
The following issues were reported in CUPS:
A remote attacker might send or entice a user to send a specially crafted print job to CUPS, possibly resulting in the execution of arbitrary code with the privileges of the configured CUPS user -- by default this is "lp", or a Denial of Service. Furthermore, the web interface could be used to conduct DNS rebinding attacks.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-1.3.10"
Several remotely exploitable bugs have been found in CUPS, which allow remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 1.3.9-r1 | >= 1.3.9-r1 |
CUPS is the Common Unix Printing System.
Several buffer overflows were found in:
A remote attacker could send specially crafted input to a vulnerable server, resulting in the remote execution of arbitrary code with the privileges of the user running the server.
None this time.
All CUPS users should upgrade to the latest version.
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-1.3.9-r1"
A vulnerability in CUPS might allow for the execution of arbitrary code or a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 1.2.12-r8 | >= 1.2.12-r8 |
CUPS provides a portable printing layer for UNIX-based operating systems.
Thomas Pollet reported a possible integer overflow vulnerability in the PNG image handling in the file filter/image-png.c.
A malicious user might be able to execute arbitrary code with the privileges of the user running CUPS (usually lp), or cause a Denial of Service by sending a specially crafted PNG image to the print server. The vulnerability is exploitable via the network if CUPS is sharing printers remotely.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-1.2.12-r8"
Multiple vulnerabilities have been discovered in CUPS, allowing for the remote execution of arbitrary code and a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 1.2.12-r7 | >= 1.2.12-r7 |
CUPS provides a portable printing layer for UNIX-based operating systems.
Multiple vulnerabilities have been reported in CUPS:
A local attacker could send specially crafted network packets or print jobs and possibly execute arbitrary code with the privileges of the user running CUPS (usually lp), or cause a Denial of Service. The vulnerabilities are exploitable via the network when CUPS is sharing printers remotely.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-1.2.12-r7"
Multiple vulnerabilities have been discovered in CUPS, allowing for the remote execution of arbitrary code and a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 1.3.5 | >= 1.2.12-r4 (revision), >= 1.3.5 |
CUPS provides a portable printing layer for UNIX-based operating systems. The alternate pdftops filter is a CUPS filter used to convert PDF files to the Postscript format via Poppler; the filter is installed by default in Gentoo Linux.
Wei Wang (McAfee AVERT Research) discovered an integer underflow in the asn1_get_string() function of the SNMP backend, leading to a stack-based buffer overflow when handling SNMP responses (CVE-2007-5849). Elias Pipping (Gentoo) discovered that the alternate pdftops filter creates temporary files with predictable file names when reading from standard input (CVE-2007-6358). Furthermore, the resolution of a Denial of Service vulnerability covered in GLSA 200703-28 introduced another Denial of Service vulnerability within SSL handling (CVE-2007-4045).
A remote attacker on the local network could exploit the first vulnerability to execute arbitrary code with elevated privileges by sending specially crafted SNMP messages as a response to an SNMP broadcast request. A local attacker could exploit the second vulnerability to overwrite arbitrary files with the privileges of the user running the CUPS spooler (usually lp) by using symlink attacks. A remote attacker could cause a Denial of Service condition via the third vulnerability when SSL is enabled in CUPS.
To disable SNMP support in CUPS, you have have to manually delete the file "/usr/libexec/cups/backend/snmp". Please note that the file is reinstalled if you merge CUPS again later. To disable the pdftops filter, delete all lines referencing "pdftops" in CUPS' "mime.convs" configuration file. To work around the third vulnerability, disable SSL support via the corresponding USE flag.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-1.2.12-r4"
CUPS contains a boundary checking error that might lead to the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 1.2.12-r2 | >= 1.2.12-r2 |
CUPS provides a portable printing layer for UNIX-based operating systems.
Alin Rad Pop (Secunia Research) discovered an off-by-one error in the ippReadIO() function when handling Internet Printing Protocol (IPP) tags that might allow to overwrite one byte on the stack.
A local attacker could send a specially crafted IPP request containing "textWithLanguage" or "nameWithLanguage" tags, leading to a Denial of Service or the execution of arbitrary code with the privileges of the "lp" user. If CUPS is configured to allow network printing, this vulnerability might be remotely exploitable.
To avoid remote exploitation, network access to CUPS servers on port 631/udp should be restricted. In order to do this, update the "Listen" setting in cupsd.conf to "Listen localhost:631" or add a rule to the system's firewall. However, this will not avoid local users from exploiting this vulnerability.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-1.2.12-r2"
CUPS incorrectly handles partially-negotiated SSL connections allowing for a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 1.2.9 | >= 1.2.9 |
CUPS provides a portable printing layer for UNIX-based operating systems.
CUPS does not properly handle partially-negotiated SSL connections. Upon receiving a partially-negotiated SSL connection, CUPS no longer accepts further incoming connections, as the initial connection never times out.
An attacker could partially negotiate an SSL connection with a CUPS server, and cause future connections to that server to fail, resulting in a Denial of Service.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-1.2.9"
Multiple vulnerabilities have been discovered in Xpdf, GPdf, CUPS and Poppler potentially resulting in the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-text/gpdf | * | < 2.10.0-r2 | >= 2.10.0-r2 |
| app-text/poppler | * | < 0.4.2-r1 | >= 0.4.2-r1, >= 0.3.0-r1 (revision) |
| app-text/xpdf | * | < 3.01-r2 | >= 3.01-r2 |
| net-print/cups | * | < 1.1.23-r3 | >= 1.1.23-r3 |
Xpdf and GPdf are PDF file viewers that run under the X Window System. Poppler is a PDF rendering library based on Xpdf code. The Common UNIX Printing System (CUPS) is a cross-platform print spooler. It makes use of Xpdf code to handle PDF files.
infamous41md discovered that several Xpdf functions lack sufficient boundary checking, resulting in multiple exploitable buffer overflows.
An attacker could entice a user to open a specially-crafted PDF file which would trigger an overflow, potentially resulting in execution of arbitrary code with the rights of the user running Xpdf, CUPS, GPdf or Poppler.
There is no known workaround at this time.
All Xpdf users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-text/xpdf-3.01-r2"
All GPdf users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-text/gpdf-2.10.0-r2"
All Poppler users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose app-text/poppler
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-1.1.23-r3"
CUPS includes Xpdf code and therefore is vulnerable to the recent stack overflow issue, potentially resulting in the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 1.1.23-r1 | >= 1.1.23-r1 |
The Common UNIX Printing System (CUPS) is a cross-platform print spooler. It makes use of Xpdf code to handle PDF files.
The Decrypt::makeFileKey2 function in Xpdf's Decrypt.cc insufficiently checks boundaries when processing /Encrypt /Length tags in PDF files (GLSA 200501-28).
This issue could be exploited by a remote attacker to execute arbitrary code by sending a malicious print job to a CUPS spooler.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-1.1.23-r1"
Multiple vulnerabilities have been found in CUPS, ranging from local Denial of Service attacks to the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 1.1.23 | >= 1.1.23 |
The Common UNIX Printing System (CUPS) is a cross-platform print spooler, hpgltops is a CUPS filter handling printing of HPGL files and lppasswd is a program used locally to manage spooler passwords.
CUPS makes use of vulnerable Xpdf code to handle PDF files (CAN-2004-1125). Furthermore, Ariel Berkman discovered a buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program (CAN-2004-1267). Finally, Bartlomiej Sieka discovered several problems in the lppasswd program: it ignores some write errors (CAN-2004-1268), it can leave the passwd.new file in place (CAN-2004-1269) and it does not verify that passwd.new file is different from STDERR (CAN-2004-1270).
The Xpdf and hpgltops vulnerabilities may be exploited by a remote attacker to execute arbitrary code by sending specific print jobs to a CUPS spooler. The lppasswd vulnerabilities may be exploited by a local attacker to write data to the CUPS password file or deny further password modifications.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-1.1.23"
Multiple integer overflows were discovered in Xpdf, potentially resulting in execution of arbitrary code upon viewing a malicious PDF file. CUPS includes Xpdf code and therefore is vulnerable to the same issues.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-text/xpdf | * | <= 3.00-r4 | >= 3.00-r5 |
| net-print/cups | * | <= 1.1.20-r4 | >= 1.1.20-r5 |
Xpdf is an open source viewer for Portable Document Format (PDF) files. The Common UNIX Printing System (CUPS) is a cross-platform print spooler that includes some Xpdf code.
Chris Evans discovered multiple integer overflow issues in Xpdf.
An attacker could entice an user to open a specially-crafted PDF file, potentially resulting in execution of arbitrary code with the rights of the user running Xpdf. By enticing an user to directly print the PDF file to a CUPS printer, an attacker could also crash the CUPS spooler or execute arbitrary code with the rights of the CUPS spooler, which is usually the "lp" user.
There is no known workaround at this time.
All Xpdf users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-text/xpdf-3.00-r5"
All CUPS users should also upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-1.1.20-r5"
CUPS leaks information about user names and passwords when using remote printing to SMB-shared printers which require authentication.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | <= 1.1.20-r2, = 1.1.21 | >= 1.1.20-r3 (revision), >= 1.1.21-r1 |
The Common UNIX Printing System (CUPS) is a cross-platform print spooler.
When printing to a SMB-shared printer requiring authentication, CUPS leaks the user name and password to a logfile.
A local user could gain knowledge of sensitive authentication data.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge sync # emerge -pv ">=net-print/cups-1.1.20-r3" # emerge ">=net-print/cups-1.1.20-r3"
A vulnerability in CUPS allows remote attackers to cause a denial of service when sending a carefully-crafted UDP packet to the IPP port.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups | * | < 1.1.20-r2 | >= 1.1.20-r2 |
The Common UNIX Printing System (CUPS) is a cross-platform print spooler.
Alvaro Martinez Echevarria discovered a hole in the CUPS Internet Printing Protocol (IPP) implementation that allows remote attackers to cause CUPS to stop listening on the IPP port.
A remote user with malicious intent can easily cause a denial of service to the CUPS daemon by sending a specially-crafted UDP datagram packet to the IPP port.
There is no known workaround at this time.
All CUPS users should upgrade to the latest version:
# emerge sync # emerge -pv ">=net-print/cups-1.1.20-r2" # emerge ">=net-print/cups-1.1.20-r2"