https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:03:29 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:4265 <p><strong>Affected:</strong> AlmaLinux:8: cups, AlmaLinux:8: cups-client, AlmaLinux:8: cups-devel, AlmaLinux:8: cups-filesystem, AlmaLinux:8: cups-ipptool, AlmaLinux:8: cups-libs, AlmaLinux:8: cups-lpd</p> <p>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.</p> <p>Security Fix(es):</p> <p>* cups: Cupsd Listen arbitrary chmod 0140777 (CVE-2024-35235)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: cups, AlmaLinux:8: cups-client, AlmaLinux:8: cups-devel, AlmaLinux:8: cups-filesystem, AlmaLinux:8: cups-ipptool, AlmaLinux:8: cups-libs, AlmaLinux:8: cups-lpd</p> <p>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.</p> <p>Security Fix(es):</p> <p>* cups: Cupsd Listen arbitrary chmod 0140777 (CVE-2024-35235)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:4265 https://cve.radiocsirt.org/vuln/bdu:2024-05605 bdu:2024-05605 https://cve.radiocsirt.org/vuln/bdu:2024-05605 https://cve.radiocsirt.org/vuln/bell-cve-2024-35235 <p><strong>Affected:</strong> Alpaquita:23: cups, Alpaquita:stream: cups</p> <p><strong>Affected:</strong> Alpaquita:23: cups, Alpaquita:stream: cups</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-35235 https://cve.radiocsirt.org/vuln/euvd-2026-218561 EUVD-2026-218561 https://cve.radiocsirt.org/vuln/euvd-2026-218561 https://cve.radiocsirt.org/vuln/fkie_cve-2024-35235 <p>OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument, providing world-writable access to the target. Given that cupsd is often running as root, this can result in the change of permission of any user or system files to be world writable. Given the aforementioned Ubuntu AppArmor context, on such systems this vulnerability is limited to those files modifiable by the cupsd process. In that specific case it was found to be possible to turn the configuration of the Listen argument into full control over the cupsd.conf and cups-files.conf configuration files. By later setting the User and Group arguments in cups-files.conf, and printing with a printer configured by PPD with a `FoomaticRIPCommandLine` argument, arbitrary user and group (not root) command execution could be achieved, which can further be used on Ubuntu systems to achieve full root command execution. Commit ff1f8a623e090dee8a8aadf12a6a4b25efac143d contains a patch for the issue.</p> <p>OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument, providing world-writable access to the target. Given that cupsd is often running as root, this can result in the change of permission of any user or system files to be world writable. Given the aforementioned Ubuntu AppArmor context, on such systems this vulnerability is limited to those files modifiable by the cupsd process. In that specific case it was found to be possible to turn the configuration of the Listen argument into full control over the cupsd.conf and cups-files.conf configuration files. By later setting the User and Group arguments in cups-files.conf, and printing with a printer configured by PPD with a `FoomaticRIPCommandLine` argument, arbitrary user and group (not root) command execution could be achieved, which can further be used on Ubuntu systems to achieve full root command execution. Commit ff1f8a623e090dee8a8aadf12a6a4b25efac143d contains a patch for the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-35235 https://cve.radiocsirt.org/vuln/msrc_cve-2024-35235 msrc_CVE-2024-35235 https://cve.radiocsirt.org/vuln/msrc_cve-2024-35235 https://cve.radiocsirt.org/vuln/oesa-2024-1758 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: cups, openEuler:22.03-LTS-SP1: cups, openEuler:22.03-LTS-SP3: cups, openEuler:24.03-LTS: cups</p> <p>CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.. Security Fix(es): OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument, providing world-writable access to the target. Given that cupsd is often running as root, this can result in the change of permission of any user or system files to be world writable. Given the aforementioned Ubuntu AppArmor context, on such systems this vulnerability is limited to those files modifiable by the cupsd process. In that specific case it was found to be possible to turn the configuration of the Listen argument into full control over the cupsd.conf and cups-files.conf configuration files. By later setting the User and Group arguments in cups-files.conf, and printing with a printer configured by PPD with a `FoomaticRIPCommandLine` argument, arbitrary user and group (not root) command execution could be achieved, which can further be used on Ubuntu systems to achieve full root command execution. Commit ff1f8a623e090dee8a8aadf12a6a4b25efac143d contains a patch for the issue. (CVE-2024-35235)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: cups, openEuler:22.03-LTS-SP1: cups, openEuler:22.03-LTS-SP3: cups, openEuler:24.03-LTS: cups</p> <p>CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.. Security Fix(es): OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument, providing world-writable access to the target. Given that cupsd is often running as root, this can result in the change of permission of any user or system files to be world writable. Given the aforementioned Ubuntu AppArmor context, on such systems this vulnerability is limited to those files modifiable by the cupsd process. In that specific case it was found to be possible to turn the configuration of the Listen argument into full control over the cupsd.conf and cups-files.conf configuration files. By later setting the User and Group arguments in cups-files.conf, and printing with a printer configured by PPD with a `FoomaticRIPCommandLine` argument, arbitrary user and group (not root) command execution could be achieved, which can further be used on Ubuntu systems to achieve full root command execution. Commit ff1f8a623e090dee8a8aadf12a6a4b25efac143d contains a patch for the issue. (CVE-2024-35235)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1758 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14041-1 <p>cups-2.4.8-1.1 on GA media</p> <p>cups-2.4.8-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14041-1 https://cve.radiocsirt.org/vuln/rhsa-2024:4580 <p>cups: Cupsd Listen arbitrary chmod 0140777</p> <p>cups: Cupsd Listen arbitrary chmod 0140777</p> https://cve.radiocsirt.org/vuln/rhsa-2024:4580 https://cve.radiocsirt.org/vuln/suse-su-2024:2002-1 <p>Security update for cups</p> <p>Security update for cups</p> https://cve.radiocsirt.org/vuln/suse-su-2024:2002-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-35235 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: cups, Ubuntu:Pro:18.04:LTS: cups, Ubuntu:20.04:LTS: cups, Ubuntu:22.04:LTS: cups, Ubuntu:24.04:LTS: cups</p> <p>OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument, providing world-writable access to the target. Given that cupsd is often running as root, this can result in the change of permission of any user or system files to be world writable. Given the aforementioned Ubuntu AppArmor context, on such systems this vulnerability is limited to those files modifiable by the cupsd process. In that specific case it was found to be possible to turn the configuration of the Listen argument into full control over the cupsd.conf and cups-files.conf configuration files. By later setting the User and Group arguments in cups-files.conf, and printing with a printer configured by PPD with a `FoomaticRIPCommandLine` argument, arbitrary user and group (not root) command execution could be achieved, which can further be used on Ubuntu systems to achieve full root command execution. Commit ff1f8a623e090dee8a8aadf12a6a4b25efac143d contains a patch for the issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: cups, Ubuntu:Pro:18.04:LTS: cups, Ubuntu:20.04:LTS: cups, Ubuntu:22.04:LTS: cups, Ubuntu:24.04:LTS: cups</p> <p>OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument, providing world-writable access to the target. Given that cupsd is often running as root, this can result in the change of permission of any user or system files to be world writable. Given the aforementioned Ubuntu AppArmor context, on such systems this vulnerability is limited to those files modifiable by the cupsd process. In that specific case it was found to be possible to turn the configuration of the Listen argument into full control over the cupsd.conf and cups-files.conf configuration files. By later setting the User and Group arguments in cups-files.conf, and printing with a printer configured by PPD with a `FoomaticRIPCommandLine` argument, arbitrary user and group (not root) command execution could be achieved, which can further be used on Ubuntu systems to achieve full root command execution. Commit ff1f8a623e090dee8a8aadf12a6a4b25efac143d contains a patch for the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-35235 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1369 <p>Ein lokaler Angreifer kann eine Schwachstelle in CUPS ausnutzen, um Dateien zu manipulieren.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in CUPS ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1369