https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 09:00:22 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-107885 <p><strong>Affected:</strong> Alpaquita:23: cups, Alpaquita:25: cups, Alpaquita:stream: cups</p> <p><strong>Affected:</strong> Alpaquita:23: cups, Alpaquita:25: cups, Alpaquita:stream: cups</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-107885 https://cve.radiocsirt.org/vuln/euvd-2026-384933 EUVD-2026-384933 https://cve.radiocsirt.org/vuln/euvd-2026-384933 https://cve.radiocsirt.org/vuln/fkie_cve-2026-107885 <p>OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.</p> <p>OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-107885 https://cve.radiocsirt.org/vuln/ghsa-746c-56j9-v8rw <p>OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.</p> <p>OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.</p> https://cve.radiocsirt.org/vuln/ghsa-746c-56j9-v8rw https://cve.radiocsirt.org/vuln/rhsa-2026:81410 <p>cups: cups: Denial of Service via improper job submission timeout handling cups: cups: Denial of Service via double-free in printer class management cups: CUPS: Denial of Service via deleted temporary printer cups: cups: Denial of Service via repeated IPP group tags</p> <p>cups: cups: Denial of Service via improper job submission timeout handling cups: cups: Denial of Service via double-free in printer class management cups: CUPS: Denial of Service via deleted temporary printer cups: cups: Denial of Service via repeated IPP group tags</p> https://cve.radiocsirt.org/vuln/rhsa-2026:81410 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-107885 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: cups, Ubuntu:Pro:18.04:LTS: cups, Ubuntu:Pro:20.04:LTS: cups, Ubuntu:22.04:LTS: cups, Ubuntu:24.04:LTS: cups, Ubuntu:26.10: cups, Ubuntu:26.04:LTS: cups</p> <p>OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: cups, Ubuntu:Pro:18.04:LTS: cups, Ubuntu:Pro:20.04:LTS: cups, Ubuntu:22.04:LTS: cups, Ubuntu:24.04:LTS: cups, Ubuntu:26.10: cups, Ubuntu:26.04:LTS: cups</p> <p>OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-107885