CVE catalog

CVE-2024-35235

CUPS vulnerability

Severity: High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: Jun 11, 2024, 2:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 2.42% · Oct 25, 2026

A flaw was found in the cupsd server. When starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can perform an arbitrary chmod of the provided argument, providing world-writable access to the target. Since cupsd is often running as root, this issue can result in the change of permission of any user or system files to be world writable. cups: Cupsd Listen arbitrary chmod 0140777 The CVE-2024-35235 vulnerability is classified as moderate severity rather than important primarily due to its requirement for elevated privileges and specific preconditions for exploitation. The vulnerability necessitates the ability to edit the cupsd.conf file, which typically requires administrative access. Furthermore, successful exploitation hinges on creating a symbolic link in a writable directory and manipulating the Listen directive within cupsd.conf. While this can lead to arbitrary chmod operations and potentially compromise system files, the precondition of administrative access significantly reduces the likelihood of exploitation by unauthorized users, thereby mitigating the overall impact and severity of the issue. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	cups	sid	`2.4.20-1`	fixed
Debian	cups	forky	`2.4.18-1`	fixed
Debian	cups	trixie	`2.4.10-3+deb13u2`	fixed
Debian	cups	trixie-security	`2.4.10-3+deb13u1`	fixed
Debian	cups	bookworm	`2.4.2-3+deb12u9`	fixed
Debian	cups	bookworm-security	`2.4.2-3+deb12u9`	fixed
Ubuntu	cups	noble	`2.4.2-3+deb12u6`	fixed
Ubuntu	cups	noble	`2.4.7-1.2ubuntu7.1`	fixed
Ubuntu	cups-bsd	noble	`2.4.7-1.2ubuntu7.1`	fixed
Ubuntu	cups-client	noble	`2.4.7-1.2ubuntu7.1`	fixed
Ubuntu	cups-common	noble	`2.4.7-1.2ubuntu7.1`	fixed
Ubuntu	cups-core-drivers	noble	`2.4.7-1.2ubuntu7.1`	fixed
Ubuntu	cups-daemon	noble	`2.4.7-1.2ubuntu7.1`	fixed
Ubuntu	cups-ipp-utils	noble	`2.4.7-1.2ubuntu7.1`	fixed
Ubuntu	cups-ppdc	noble	`2.4.7-1.2ubuntu7.1`	fixed
Ubuntu	cups-server-common	noble	`2.4.7-1.2ubuntu7.1`	fixed
Ubuntu	libcups2-dev	noble	`2.4.7-1.2ubuntu7.1`	fixed
Ubuntu	libcups2t64	noble	`2.4.7-1.2ubuntu7.1`	fixed
Ubuntu	libcupsimage2-dev	noble	`2.4.7-1.2ubuntu7.1`	fixed
Ubuntu	libcupsimage2t64	noble	`2.4.7-1.2ubuntu7.1`	fixed
Alpine	cups	3.17	`2.4.9-r0`	fixed
Alpine	cups	3.18	`2.4.9-r0`	fixed
Alpine	cups	3.19	`2.4.9-r0`	fixed
Alpine	cups	3.20	`2.4.9-r0`	fixed
Alpine	cups	3.21	`2.4.9-r0`	fixed
Alpine	cups	3.22	`2.4.9-r0`	fixed
Alpine	cups	3.23	`2.4.9-r0`	fixed
Alpine	cups	3.24	`2.4.9-r0`	fixed
Ubuntu	cups	pro	`2.2.4-7ubuntu2`	vulnerable
Ubuntu	cups	pro	`2.2.5-2`	vulnerable
Ubuntu	cups	pro	`2.2.6-2`	vulnerable
Ubuntu	cups	pro	`2.2.6-3`	vulnerable
Ubuntu	cups	pro	`2.2.6-4`	vulnerable
Ubuntu	cups	pro	`2.2.6-5`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu1`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.1`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.2`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.3`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.4`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.5`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.6`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.7`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.8`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.9`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.10`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.10+esm1`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.10+esm2`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.10+esm3`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.10+esm4`	fixed
Ubuntu	cups	20.04	`2.2.12-2ubuntu1`	vulnerable
Ubuntu	cups	20.04	`2.3.0-6`	vulnerable
Ubuntu	cups	20.04	`2.3.0-7`	vulnerable
Ubuntu	cups	20.04	`2.3.0-7ubuntu1`	vulnerable
Ubuntu	cups	20.04	`2.3.1-1ubuntu1`	vulnerable
Ubuntu	cups	20.04	`2.3.1-2`	vulnerable
Ubuntu	cups	20.04	`2.3.1-4`	vulnerable
Ubuntu	cups	20.04	`2.3.1-7`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.1`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.2`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.3`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.4`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.5`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.6`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.7`	fixed
Ubuntu	cups	22.04	`2.3.3op2-7ubuntu2`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu1`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu2`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu3`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.1`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.2`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.4`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.6`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.7`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.8`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.9`	fixed
Ubuntu	cups	24.04	`2.4.6-0ubuntu3`	vulnerable
Ubuntu	cups	24.04	`2.4.7-1.2ubuntu2`	vulnerable
Ubuntu	cups	24.04	`2.4.7-1.2ubuntu3`	vulnerable
Ubuntu	cups	24.04	`2.4.7-1.2ubuntu7`	vulnerable
Ubuntu	cups	24.04	`2.4.7-1.2ubuntu7.1`	fixed
Ubuntu	cups	pro	`2.2.4-7ubuntu2`	vulnerable
Ubuntu	cups	pro	`2.2.5-2`	vulnerable
Ubuntu	cups	pro	`2.2.6-2`	vulnerable
Ubuntu	cups	pro	`2.2.6-3`	vulnerable
Ubuntu	cups	pro	`2.2.6-4`	vulnerable
Ubuntu	cups	pro	`2.2.6-5`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu1`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.1`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.2`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.3`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.4`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.5`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.6`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.7`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.8`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.9`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.10`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.10+esm1`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.10+esm2`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.10+esm3`	vulnerable
Ubuntu	cups	pro	`2.2.7-1ubuntu2.10+esm4`	fixed
Ubuntu	cups	20.04	`2.2.12-2ubuntu1`	vulnerable
Ubuntu	cups	20.04	`2.3.0-6`	vulnerable
Ubuntu	cups	20.04	`2.3.0-7`	vulnerable
Ubuntu	cups	20.04	`2.3.0-7ubuntu1`	vulnerable
Ubuntu	cups	20.04	`2.3.1-1ubuntu1`	vulnerable
Ubuntu	cups	20.04	`2.3.1-2`	vulnerable
Ubuntu	cups	20.04	`2.3.1-4`	vulnerable
Ubuntu	cups	20.04	`2.3.1-7`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.1`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.2`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.3`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.4`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.5`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.6`	vulnerable
Ubuntu	cups	20.04	`2.3.1-9ubuntu1.7`	fixed
Ubuntu	cups	22.04	`2.3.3op2-7ubuntu2`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu1`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu2`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu3`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.1`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.2`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.4`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.6`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.7`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.8`	vulnerable
Ubuntu	cups	22.04	`2.4.1op1-1ubuntu4.9`	fixed
Ubuntu	cups	24.04	`2.4.6-0ubuntu3`	vulnerable
Ubuntu	cups	24.04	`2.4.7-1.2ubuntu2`	vulnerable
Ubuntu	cups	24.04	`2.4.7-1.2ubuntu3`	vulnerable
Ubuntu	cups	24.04	`2.4.7-1.2ubuntu7`	vulnerable
Ubuntu	cups	24.04	`2.4.7-1.2ubuntu7.1`	fixed
Opensuse	cups	tumbleweed	`2.4.8-1.1`	fixed
Suse	cups	linux enterprise micro 5.5	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise micro 5.3	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise micro 5.4	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise micro 5.5	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise module for basesystem 15 sp5	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise module for basesystem 15 sp6	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise module for desktop applications 15 sp5	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise module for desktop applications 15 sp6	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise module for development tools 15 sp5	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise module for development tools 15 sp6	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise high performance computing 15 sp2-ltss	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise high performance computing 15 sp3-ltss	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise high performance computing 15 sp4-espos	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise high performance computing 15 sp4-ltss	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise server 15 sp2-ltss	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise server 15 sp3-ltss	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise server 15 sp4-ltss	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise server for sap applications 15 sp2	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise server for sap applications 15 sp3	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise server for sap applications 15 sp4	`2.2.7-150000.3.59.1`	fixed
Suse	cups	manager proxy 4.3	`2.2.7-150000.3.59.1`	fixed
Suse	cups	manager server 4.3	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise micro 5.2	`2.2.7-150000.3.59.1`	fixed
Suse	cups	enterprise storage 7.1	`2.2.7-150000.3.59.1`	fixed
Opensuse	cups	leap micro 5.3	`2.2.7-150000.3.59.1`	fixed
Opensuse	cups	leap micro 5.4	`2.2.7-150000.3.59.1`	fixed
Opensuse	cups	leap 15.5	`2.2.7-150000.3.59.1`	fixed
Opensuse	cups	leap 15.6	`2.2.7-150000.3.59.1`	fixed
Suse	cups	linux enterprise software development kit 12 sp5	`1.7.5-20.49.1`	fixed
Suse	cups	linux enterprise server 12 sp5	`1.7.5-20.49.1`	fixed
Suse	cups	linux enterprise server for sap applications 12 sp5	`1.7.5-20.49.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	cups	source	sid	`2.4.7-2`	not yet assigned	Not reported	[1073002]
Debian	cups	source	forky	`2.4.7-2`	not yet assigned	Not reported	[1073002]
Debian	cups	source	trixie	`2.4.7-2`	not yet assigned	Not reported	[1073002]
Debian	cups	source	bookworm	`2.4.2-3+deb12u6`	not yet assigned	Not reported	[1073002]
Ubuntu	cups	deb	noble	`2.4.2-3+deb12u6`	Not reported	Not reported	Not reported
Ubuntu	cups	deb	noble	`2.4.7-1.2ubuntu7.1`	Not reported	Not reported	Not reported
Ubuntu	cups-bsd	deb	noble	`2.4.7-1.2ubuntu7.1`	Not reported	Not reported	Not reported
Ubuntu	cups-client	deb	noble	`2.4.7-1.2ubuntu7.1`	Not reported	Not reported	Not reported
Ubuntu	cups-common	deb	noble	`2.4.7-1.2ubuntu7.1`	Not reported	Not reported	Not reported
Ubuntu	cups-core-drivers	deb	noble	`2.4.7-1.2ubuntu7.1`	Not reported	Not reported	Not reported
Ubuntu	cups-daemon	deb	noble	`2.4.7-1.2ubuntu7.1`	Not reported	Not reported	Not reported
Ubuntu	cups-ipp-utils	deb	noble	`2.4.7-1.2ubuntu7.1`	Not reported	Not reported	Not reported
Ubuntu	cups-ppdc	deb	noble	`2.4.7-1.2ubuntu7.1`	Not reported	Not reported	Not reported
Ubuntu	cups-server-common	deb	noble	`2.4.7-1.2ubuntu7.1`	Not reported	Not reported	Not reported
Ubuntu	libcups2-dev	deb	noble	`2.4.7-1.2ubuntu7.1`	Not reported	Not reported	Not reported
Ubuntu	libcups2t64	deb	noble	`2.4.7-1.2ubuntu7.1`	Not reported	Not reported	Not reported
Ubuntu	libcupsimage2-dev	deb	noble	`2.4.7-1.2ubuntu7.1`	Not reported	Not reported	Not reported
Ubuntu	libcupsimage2t64	deb	noble	`2.4.7-1.2ubuntu7.1`	Not reported	Not reported	Not reported
Alpine	cups	apk	3.17	`2.4.9-r0`	Not reported	ALPINE-CVE-2024-35235	Not reported
Alpine	cups	apk	3.18	`2.4.9-r0`	Not reported	ALPINE-CVE-2024-35235	Not reported
Alpine	cups	apk	3.19	`2.4.9-r0`	Not reported	ALPINE-CVE-2024-35235	Not reported
Alpine	cups	apk	3.20	`2.4.9-r0`	Not reported	ALPINE-CVE-2024-35235	Not reported
Alpine	cups	apk	3.21	`2.4.9-r0`	Not reported	ALPINE-CVE-2024-35235	Not reported
Alpine	cups	apk	3.22	`2.4.9-r0`	Not reported	ALPINE-CVE-2024-35235	Not reported
Alpine	cups	apk	3.23	`2.4.9-r0`	Not reported	ALPINE-CVE-2024-35235	Not reported
Alpine	cups	apk	3.24	`2.4.9-r0`	Not reported	ALPINE-CVE-2024-35235	Not reported
Ubuntu	cups	deb	pro	`2.2.7-1ubuntu2.10+esm4`	Not reported	USN-6844-1	Not reported
Ubuntu	cups	deb	20.04	`2.3.1-9ubuntu1.7`	Not reported	USN-6844-1	Not reported
Ubuntu	cups	deb	22.04	`2.4.1op1-1ubuntu4.9`	Not reported	USN-6844-1	Not reported
Ubuntu	cups	deb	24.04	`2.4.7-1.2ubuntu7.1`	Not reported	USN-6844-1	Not reported
Ubuntu	cups	deb	pro	`2.2.7-1ubuntu2.10+esm4`	Not reported	UBUNTU-CVE-2024-35235	Not reported
Ubuntu	cups	deb	20.04	`2.3.1-9ubuntu1.7`	Not reported	UBUNTU-CVE-2024-35235	Not reported
Ubuntu	cups	deb	22.04	`2.4.1op1-1ubuntu4.9`	Not reported	UBUNTU-CVE-2024-35235	Not reported
Ubuntu	cups	deb	24.04	`2.4.7-1.2ubuntu7.1`	Not reported	UBUNTU-CVE-2024-35235	Not reported
Opensuse	cups	rpm	tumbleweed	`2.4.8-1.1`	Not reported	OPENSUSE-SU-2024:14041-1	Not reported
Suse	cups	rpm	linux enterprise micro 5.5	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-2	Not reported
Suse	cups	rpm	linux enterprise micro 5.3	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise micro 5.4	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise micro 5.5	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise module for basesystem 15 sp5	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise module for basesystem 15 sp6	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise module for desktop applications 15 sp5	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise module for desktop applications 15 sp6	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise module for development tools 15 sp5	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise module for development tools 15 sp6	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise high performance computing 15 sp2-ltss	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise high performance computing 15 sp3-ltss	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise high performance computing 15 sp4-espos	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise high performance computing 15 sp4-ltss	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise server 15 sp2-ltss	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise server 15 sp3-ltss	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise server 15 sp4-ltss	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise server for sap applications 15 sp2	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise server for sap applications 15 sp3	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise server for sap applications 15 sp4	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	manager proxy 4.3	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	manager server 4.3	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise micro 5.2	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	enterprise storage 7.1	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Opensuse	cups	rpm	leap micro 5.3	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Opensuse	cups	rpm	leap micro 5.4	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Opensuse	cups	rpm	leap 15.5	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Opensuse	cups	rpm	leap 15.6	`2.2.7-150000.3.59.1`	Not reported	SUSE-SU-2024:2003-1	Not reported
Suse	cups	rpm	linux enterprise software development kit 12 sp5	`1.7.5-20.49.1`	Not reported	SUSE-SU-2024:2002-1	Not reported
Suse	cups	rpm	linux enterprise server 12 sp5	`1.7.5-20.49.1`	Not reported	SUSE-SU-2024:2002-1	Not reported
Suse	cups	rpm	linux enterprise server for sap applications 12 sp5	`1.7.5-20.49.1`	Not reported	SUSE-SU-2024:2002-1	Not reported

[Debian bug #1073002]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[cups]Unknown
Details (4)
- 2.4.2-3+deb12u9 · amd64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · amd64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
[cups-bsd]Unknown
Source package: [cups]
Details (4)
- 2.4.2-3+deb12u9 · amd64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · amd64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
[cups-client]Unknown
Source package: [cups]
Details (4)
- 2.4.2-3+deb12u9 · amd64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · amd64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
[cups-common]Unknown
Source package: [cups]
Details (4)
- 2.4.2-3+deb12u9 · all · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · all · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · all · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · all · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
[cups-core-drivers]Unknown
Source package: [cups]
Details (4)
- 2.4.2-3+deb12u9 · amd64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · amd64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
[cups-daemon]Unknown
Source package: [cups]
Details (4)
- 2.4.2-3+deb12u9 · amd64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · amd64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
[cups-ipp-utils]Unknown
Source package: [cups]
Details (4)
- 2.4.2-3+deb12u9 · amd64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · amd64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
[cups-ppdc]Unknown
Source package: [cups]
Details (4)
- 2.4.2-3+deb12u9 · amd64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · amd64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
[cups-server-common]Unknown
Source package: [cups]
Details (4)
- 2.4.2-3+deb12u9 · all · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · all · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · all · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · all · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
[libcups2]Unknown
Source package: [cups]
Details (4)
- 2.4.2-3+deb12u9 · amd64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · amd64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
[libcups2-dev]Unknown
Source package: [cups]
Details (4)
- 2.4.2-3+deb12u9 · amd64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · amd64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
[libcupsimage2]Unknown
Source package: [cups]
Details (4)
- 2.4.2-3+deb12u9 · amd64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · amd64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
[libcupsimage2-dev]Unknown
Source package: [cups]
Details (4)
- 2.4.2-3+deb12u9 · amd64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · amd64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12
- 2.4.2-3+deb12u9 · arm64 · bookworm-security
  Fixed · Fixed: 2.4.2-3+deb12u6
  usn · cups · debian · bookworm; usn · cups · debian · 12

[Debian 13 (Trixie)]

[cups]Unknown
Details (4)
- 2.4.10-3+deb13u2 · amd64 · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u2 · arm64 · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
[cups-bsd]Unknown
Source package: [cups]
Details (4)
- 2.4.10-3+deb13u2 · amd64 · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u2 · arm64 · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
[cups-client]Unknown
Source package: [cups]
Details (4)
- 2.4.10-3+deb13u2 · amd64 · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u2 · arm64 · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
[cups-common]Unknown
Source package: [cups]
Details (4)
- 2.4.10-3+deb13u2 · all · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u2 · all · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · all · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · all · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
[cups-core-drivers]Unknown
Source package: [cups]
Details (4)
- 2.4.10-3+deb13u2 · amd64 · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u2 · arm64 · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
[cups-daemon]Unknown
Source package: [cups]
Details (4)
- 2.4.10-3+deb13u2 · amd64 · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u2 · arm64 · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
[cups-ipp-utils]Unknown
Source package: [cups]
Details (4)
- 2.4.10-3+deb13u2 · amd64 · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u2 · arm64 · trixie
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13
- 2.4.10-3+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 2.4.7-2
  usn · cups · debian · 13

Next results

Observed: Oct 27, 2026, 3:32:21 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]