CVE catalog

CVE-2022-26691

cups: CVE-2022-26691

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.60% · Oct 25, 2026

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiancupssid2.4.20-1fixed
Debiancupsforky2.4.18-1fixed
Debiancupstrixie2.4.10-3+deb13u2fixed
Debiancupstrixie-security2.4.10-3+deb13u1fixed
Debiancupsbookworm2.4.2-3+deb12u9fixed
Debiancupsbookworm-security2.4.2-3+deb12u9fixed
Ubuntucupspro2.1.0-4ubuntu3vulnerable
Ubuntucupspro2.1.0-5vulnerable
Ubuntucupspro2.1.0-6vulnerable
Ubuntucupspro2.1.0-6ubuntu1vulnerable
Ubuntucupspro2.1.0-7vulnerable
Ubuntucupspro2.1.2-1vulnerable
Ubuntucupspro2.1.2-2vulnerable
Ubuntucupspro2.1.3-1vulnerable
Ubuntucupspro2.1.3-1build1vulnerable
Ubuntucupspro2.1.3-3vulnerable
Ubuntucupspro2.1.3-4vulnerable
Ubuntucupspro2.1.3-4ubuntu0.2vulnerable
Ubuntucupspro2.1.3-4ubuntu0.3vulnerable
Ubuntucupspro2.1.3-4ubuntu0.4vulnerable
Ubuntucupspro2.1.3-4ubuntu0.5vulnerable
Ubuntucupspro2.1.3-4ubuntu0.6vulnerable
Ubuntucupspro2.1.3-4ubuntu0.7vulnerable
Ubuntucupspro2.1.3-4ubuntu0.8vulnerable
Ubuntucupspro2.1.3-4ubuntu0.9vulnerable
Ubuntucupspro2.1.3-4ubuntu0.10vulnerable
Ubuntucupspro2.1.3-4ubuntu0.11vulnerable
Ubuntucupspro2.1.3-4ubuntu0.11+esm1fixed
Ubuntucups18.042.2.4-7ubuntu2vulnerable
Ubuntucups18.042.2.5-2vulnerable
Ubuntucups18.042.2.6-2vulnerable
Ubuntucups18.042.2.6-3vulnerable
Ubuntucups18.042.2.6-4vulnerable
Ubuntucups18.042.2.6-5vulnerable
Ubuntucups18.042.2.7-1ubuntu1vulnerable
Ubuntucups18.042.2.7-1ubuntu2vulnerable
Ubuntucups18.042.2.7-1ubuntu2.1vulnerable
Ubuntucups18.042.2.7-1ubuntu2.2vulnerable
Ubuntucups18.042.2.7-1ubuntu2.3vulnerable
Ubuntucups18.042.2.7-1ubuntu2.4vulnerable
Ubuntucups18.042.2.7-1ubuntu2.5vulnerable
Ubuntucups18.042.2.7-1ubuntu2.6vulnerable
Ubuntucups18.042.2.7-1ubuntu2.7vulnerable
Ubuntucups18.042.2.7-1ubuntu2.8vulnerable
Ubuntucups18.042.2.7-1ubuntu2.9fixed
Ubuntucups20.042.2.12-2ubuntu1vulnerable
Ubuntucups20.042.3.0-6vulnerable
Ubuntucups20.042.3.0-7vulnerable
Ubuntucups20.042.3.0-7ubuntu1vulnerable
Ubuntucups20.042.3.1-1ubuntu1vulnerable
Ubuntucups20.042.3.1-2vulnerable
Ubuntucups20.042.3.1-4vulnerable
Ubuntucups20.042.3.1-7vulnerable
Ubuntucups20.042.3.1-9ubuntu1vulnerable
Ubuntucups20.042.3.1-9ubuntu1.1vulnerable
Ubuntucups20.042.3.1-9ubuntu1.2fixed
Ubuntucups22.042.3.3op2-7ubuntu2vulnerable
Ubuntucups22.042.4.1op1-1ubuntu1vulnerable
Ubuntucups22.042.4.1op1-1ubuntu2vulnerable
Ubuntucups22.042.4.1op1-1ubuntu3vulnerable
Ubuntucups22.042.4.1op1-1ubuntu4vulnerable
Ubuntucups22.042.4.1op1-1ubuntu4.1fixed
Opensusecupstumbleweed2.4.2-1.1fixed
Susecupslinux enterprise module for basesystem 15 sp32.2.7-150000.3.32.1fixed
Susecupslinux enterprise module for basesystem 15 sp42.2.7-150000.3.32.1fixed
Susecupslinux enterprise module for development tools 15 sp32.2.7-150000.3.32.1fixed
Susecupslinux enterprise module for development tools 15 sp42.2.7-150000.3.32.1fixed
Susecupslinux enterprise high performance computing 15-espos2.2.7-150000.3.32.1fixed
Susecupslinux enterprise high performance computing 15-ltss2.2.7-150000.3.32.1fixed
Susecupslinux enterprise high performance computing 15 sp1-espos2.2.7-150000.3.32.1fixed
Susecupslinux enterprise high performance computing 15 sp1-ltss2.2.7-150000.3.32.1fixed
Susecupslinux enterprise high performance computing 15 sp2-espos2.2.7-150000.3.32.1fixed
Susecupslinux enterprise high performance computing 15 sp2-ltss2.2.7-150000.3.32.1fixed
Susecupslinux enterprise server 15-ltss2.2.7-150000.3.32.1fixed
Susecupslinux enterprise server 15 sp1-bcl2.2.7-150000.3.32.1fixed
Susecupslinux enterprise server 15 sp1-ltss2.2.7-150000.3.32.1fixed
Susecupslinux enterprise server 15 sp2-bcl2.2.7-150000.3.32.1fixed
Susecupslinux enterprise server 15 sp2-ltss2.2.7-150000.3.32.1fixed
Susecupslinux enterprise server for sap applications 152.2.7-150000.3.32.1fixed
Susecupslinux enterprise server for sap applications 15 sp12.2.7-150000.3.32.1fixed
Susecupslinux enterprise server for sap applications 15 sp22.2.7-150000.3.32.1fixed
Susecupsmanager proxy 4.12.2.7-150000.3.32.1fixed
Susecupsmanager retail branch server 4.12.2.7-150000.3.32.1fixed
Susecupsmanager server 4.12.2.7-150000.3.32.1fixed
Susecupslinux enterprise micro 5.22.2.7-150000.3.32.1fixed
Susecupsenterprise storage 62.2.7-150000.3.32.1fixed
Susecupsenterprise storage 72.2.7-150000.3.32.1fixed
Opensusecupsleap 15.32.2.7-150000.3.32.1fixed
Opensusecupsleap 15.42.2.7-150000.3.32.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiancupssourcesid2.4.2-1not yet assignedNot reported[1011769]
Debiancupssourceforky2.4.2-1not yet assignedNot reported[1011769]
Debiancupssourcetrixie2.4.2-1not yet assignedNot reported[1011769]
Debiancupssourcebookworm2.4.2-1not yet assignedNot reported[1011769]
Ubuntucupsdebpro2.1.3-4ubuntu0.11+esm1Not reportedUBUNTU-CVE-2022-26691Not reported
Ubuntucupsdeb18.042.2.7-1ubuntu2.9Not reportedUBUNTU-CVE-2022-26691Not reported
Ubuntucupsdeb20.042.3.1-9ubuntu1.2Not reportedUBUNTU-CVE-2022-26691Not reported
Ubuntucupsdeb22.042.4.1op1-1ubuntu4.1Not reportedUBUNTU-CVE-2022-26691Not reported
Opensusecupsrpmtumbleweed2.4.2-1.1Not reportedOPENSUSE-SU-2024:12122-1Not reported
Susecupsrpmlinux enterprise module for basesystem 15 sp32.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise module for basesystem 15 sp42.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise module for development tools 15 sp32.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise module for development tools 15 sp42.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise high performance computing 15-espos2.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise high performance computing 15-ltss2.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise high performance computing 15 sp1-espos2.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise high performance computing 15 sp1-ltss2.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise high performance computing 15 sp2-espos2.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise high performance computing 15 sp2-ltss2.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise server 15-ltss2.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise server 15 sp1-bcl2.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise server 15 sp1-ltss2.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise server 15 sp2-bcl2.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise server 15 sp2-ltss2.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise server for sap applications 152.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise server for sap applications 15 sp12.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise server for sap applications 15 sp22.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmmanager proxy 4.12.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmmanager retail branch server 4.12.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmmanager server 4.12.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmlinux enterprise micro 5.22.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmenterprise storage 62.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Susecupsrpmenterprise storage 72.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Opensusecupsrpmleap 15.32.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported
Opensusecupsrpmleap 15.42.2.7-150000.3.32.1Not reportedSUSE-SU-2022:1861-1Not reported

[Debian bug #1011769]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [cups]Unknown
    Details (4)
    • 2.4.2-3+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

  • [cups-bsd]Unknown

    Source package: [cups]

    Details (4)
    • 2.4.2-3+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

  • [cups-client]Unknown

    Source package: [cups]

    Details (4)
    • 2.4.2-3+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

  • [cups-common]Unknown

    Source package: [cups]

    Details (4)
    • 2.4.2-3+deb12u9 · all · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · all · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · all · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · all · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

  • Source package: [cups]

    Details (4)
    • 2.4.2-3+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

  • [cups-daemon]Unknown

    Source package: [cups]

    Details (4)
    • 2.4.2-3+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

  • Source package: [cups]

    Details (4)
    • 2.4.2-3+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

  • [cups-ppdc]Unknown

    Source package: [cups]

    Details (4)
    • 2.4.2-3+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

  • Source package: [cups]

    Details (4)
    • 2.4.2-3+deb12u9 · all · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · all · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · all · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · all · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

  • [libcups2]Unknown

    Source package: [cups]

    Details (4)
    • 2.4.2-3+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

  • [libcups2-dev]Unknown

    Source package: [cups]

    Details (4)
    • 2.4.2-3+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

  • [libcupsimage2]Unknown

    Source package: [cups]

    Details (4)
    • 2.4.2-3+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

  • Source package: [cups]

    Details (4)
    • 2.4.2-3+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

    • 2.4.2-3+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.2-1

      dsa · cups · debian · bookworm

[openSUSE Tumbleweed]

  • [cups]Unknown

    Source package: [cups]

    Details (1)
    • 2.4.19-2.3 · x86_64 · tumbleweed

      Fixed · Fixed: 2.4.2-1.1

      dsa · cups · opensuse · tumbleweed

  • [cups-client]Unknown

    Source package: [cups]

    Details (1)
    • 2.4.19-2.3 · x86_64 · tumbleweed

      Unknown · Fixed: 2.4.2-1.1

      Version impact unknown

      dsa · cups · opensuse · tumbleweed

  • [cups-config]Unknown

    Source package: [cups]

    Details (1)
    • 2.4.19-2.3 · x86_64 · tumbleweed

      Unknown · Fixed: 2.4.2-1.1

      Version impact unknown

      dsa · cups · opensuse · tumbleweed

  • [cups-ddk]Unknown

    Source package: [cups]

    Details (1)
    • 2.4.19-2.3 · x86_64 · tumbleweed

      Unknown · Fixed: 2.4.2-1.1

      Version impact unknown

      dsa · cups · opensuse · tumbleweed

  • [cups-devel]Unknown

    Source package: [cups]

    Details (1)
    • 2.4.19-2.3 · x86_64 · tumbleweed

      Unknown · Fixed: 2.4.2-1.1

      Version impact unknown

      dsa · cups · opensuse · tumbleweed

  • Source package: [cups]

    Details (1)
    • 2.4.19-2.3 · x86_64 · tumbleweed

      Unknown · Fixed: 2.4.2-1.1

      Version impact unknown

      dsa · cups · opensuse · tumbleweed

  • [libcups2]Unknown

    Source package: [cups]

    Details (1)
    • 2.4.19-2.3 · x86_64 · tumbleweed

      Unknown · Fixed: 2.4.2-1.1

      Version impact unknown

      dsa · cups · opensuse · tumbleweed

Next results

Observed:

References