Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5454-1
HistoryMay 31, 2022 - 12:00 a.m.

CUPS vulnerabilities

2022-05-3100:00:00
ubuntu.com
65
cups
ubuntu 22.04
ubuntu 21.10
ubuntu 20.04
ubuntu 18.04 esm
security
remote code execution
memory operations

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

43.6%

JSON

Releases

  • Ubuntu 22.04 LTS
  • Ubuntu 21.10
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM

Packages

  • cups - Common UNIX Printing System™

Details

Joshua Mason discovered that CUPS incorrectly handled the secret key used
to access the administrative web interface. A remote attacker could
possibly use this issue to open a session as an administrator and execute
arbitrary code. (CVE-2022-26691)

It was discovered that CUPS incorrectly handled certain memory operations
when handling IPP printing. A remote attacker could possibly use this issue
to cause CUPS to crash, leading to a denial of service, or obtain sensitive
information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04
LTS. (CVE-2019-8842, CVE-2020-10001)

OSVersionArchitecturePackageVersionFilename
Ubuntu22.04noarchcups< 2.4.1op1-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchcups-bsd< 2.4.1op1-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchcups-bsd-dbgsym< 2.4.1op1-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchcups-client< 2.4.1op1-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchcups-client-dbgsym< 2.4.1op1-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchcups-common< 2.4.1op1-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchcups-core-drivers< 2.4.1op1-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchcups-core-drivers-dbgsym< 2.4.1op1-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchcups-daemon< 2.4.1op1-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchcups-daemon-dbgsym< 2.4.1op1-1ubuntu4.1UNKNOWN
Rows per page:
1-10 of 941

Related

ubuntu 1
nessus 70
osv 15
openvas 48
suse 2
prion 3
ubuntucve 3
debiancve 3
nvd 3
cvelist 3
alpinelinux 2
cve 3
veracode 3
fedora 4
redhatcve 2
debian 4
almalinux 1
rocky 3
oraclelinux 3
mageia 3
archlinux 1
redhat 6
cbl_mariner 1
slackware 1
ibm 3
freebsd 1
redos 1
rosalinux 2
photon 3
gentoo 1
ubuntu
ubuntu
CUPS vulnerabilities
2022-05-31 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : CUPS vulnerabilities (USN-5454-1)
2022-05-31 00:00:00
Ubuntu 16.04 ESM : CUPS vulnerabilities (USN-5454-2)
2022-06-01 00:00:00
SUSE SLES12 Security Update : cups (SUSE-SU-2021:0286-1)
2021-02-04 00:00:00
osv
osv
cups vulnerabilities
2022-05-31 19:35:26
cups vulnerabilities
2022-05-31 11:29:49
CVE-2019-8842
2020-10-27 20:15:21
openvas
openvas
Ubuntu: Security Advisory (USN-5454-2)
2022-08-26 00:00:00
Ubuntu: Security Advisory (USN-5454-1)
2022-06-01 00:00:00
openSUSE: Security Advisory for cups (openSUSE-SU-2021:0253-1)
2021-04-16 00:00:00
suse
suse
Security update for cups (moderate)
2021-02-05 00:00:00
Security update for cups (important)
2022-05-26 00:00:00
prion
prion
Buffer overflow
2020-10-27 20:15:00
Input validation
2021-04-02 18:15:00
Code injection
2022-05-26 18:15:00
ubuntucve
ubuntucve
CVE-2019-8842
2020-10-27 00:00:00
CVE-2020-10001
2021-04-02 00:00:00
CVE-2022-26691
2022-05-26 00:00:00
debiancve
debiancve
CVE-2019-8842
2020-10-27 20:15:21
CVE-2020-10001
2021-04-02 18:15:14
CVE-2022-26691
2022-05-26 18:15:09
nvd
nvd
CVE-2019-8842
2020-10-27 20:15:21
CVE-2020-10001
2021-04-02 18:15:14
CVE-2022-26691
2022-05-26 18:15:09
cvelist
cvelist
CVE-2019-8842
2020-10-27 19:55:33
CVE-2020-10001
2021-04-02 17:24:50
CVE-2022-26691
2022-05-26 17:47:59
alpinelinux
alpinelinux
CVE-2019-8842
2020-10-27 20:15:21
CVE-2022-26691
2022-05-26 18:15:09
cve
cve
CVE-2019-8842
2020-10-27 20:15:21
CVE-2020-10001
2021-04-02 18:15:14
CVE-2022-26691
2022-05-26 18:15:09
veracode
veracode
Buffer Overflow
2020-12-11 16:08:49
Information Disclosure
2021-11-04 15:21:04
Privilege Escalation
2022-05-29 18:58:34
fedora
fedora
[SECURITY] Fedora 32 Update: cups-2.3.3op2-1.fc32
2021-02-11 01:53:09
[SECURITY] Fedora 33 Update: cups-2.3.3op2-1.fc33
2021-02-07 01:34:52
[SECURITY] Fedora 35 Update: cups-2.3.3op2-18.fc35
2022-06-16 01:27:08
redhatcve
redhatcve
CVE-2020-10001
2021-02-03 03:20:19
CVE-2022-26691
2022-05-26 12:29:29
debian
debian
[SECURITY] [DLA 2800-1] cups security update
2021-10-29 23:39:47
[SECURITY] [DSA 5149-1] cups security update
2022-05-26 19:14:43
[SECURITY] [DLA 2237-1] cups security update
2020-06-07 16:27:26
almalinux
almalinux
Moderate: cups security and bug fix update
2021-11-09 09:16:27
rocky
rocky
cups security and bug fix update
2021-11-09 09:16:27
cups security and bug fix update
2022-06-15 12:22:08
cups security update
2022-06-13 07:14:49
oraclelinux
oraclelinux
cups security and bug fix update
2021-11-16 00:00:00
cups security and bug fix update
2022-06-20 00:00:00
cups security update
2022-07-01 00:00:00
mageia
mageia
Updated cups packages fix a security vulnerability
2021-03-08 00:35:49
Updated cups packages fix security vulnerability
2022-10-28 09:54:08
Updated cups packages fix security vulnerability
2020-06-11 01:26:12
archlinux
archlinux
[ASA-202102-13] cups: information disclosure
2021-02-06 00:00:00
redhat
redhat
(RHSA-2021:4393) Moderate: cups security and bug fix update
2021-11-09 09:16:27
(RHSA-2022:4990) Important: cups security update
2022-06-13 07:14:49
(RHSA-2022:5056) Important: cups security and bug fix update
2022-06-15 12:22:08
cbl_mariner
cbl_mariner
CVE-2022-26691 affecting package cups for versions less than 2.3.3op2-8
2024-06-12 22:23:00
slackware
slackware
[slackware-security] cups
2022-05-26 18:32:45
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to elevated privileges in Apple macOS Monterey and macOS Big Sur. (CVE-2022-26691)
2023-01-12 21:59:00
Security Bulletin: Due to use of Apple macOS Monterey and macOS Big Sur, IBM Cloud PAK for Watson AI Ops is vulnerable to attacks gaining elevated priviledges (CVE-2022-26691)
2022-09-14 15:20:46
Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to elevated privileges due to CVE-2022-26691
2022-11-04 16:20:40
freebsd
freebsd
CUPS -- memory corruption
2020-04-28 00:00:00
redos
redos
ROS-20220531-01
2022-05-31 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2281
2023-10-24 14:09:17
Advisory ROSA-SA-2024-2377
2024-03-19 12:44:17
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0106
2023-10-01 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0364
2023-03-24 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0329
2023-02-08 00:00:00
gentoo
gentoo
CUPS: Multiple Vulnerabilities
2024-02-18 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

43.6%

JSON
Related for USN-5454-1
ubuntu1nessus70osv15openvas48suse2prion3ubuntucve3debiancve3nvd3cvelist3alpinelinux2cve3veracode3fedora4redhatcve2debian4almalinux1rocky3oraclelinux3mageia3archlinux1redhat6cbl_mariner1slackware1ibm3freebsd1redos1rosalinux2photon3gentoo1