CVE catalog

CVE-2026-64611

cups-filters-1.28.17-9.1 on GA media

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.63% · Oct 25, 2026

A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially crafted printer advertisement, leading to denial of service.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibcupsfilters132.0.0-3vulnerable
Debianlibcupsfilters132.0.0-3+deb13u1vulnerable
Debianlibcupsfilters132.1.1-1vulnerable
Debianlibcupsfilters132.1.1-2vulnerable
Debianlibcupsfilters142.0.0-3vulnerable
Debianlibcupsfilters142.1.1-1vulnerable
Debianlibcupsfilters142.1.1-2vulnerable
Suselibcupsfilterslinux enterprise server 16.02.1.1-160000.3.1fixed
Suselibcupsfilterslinux enterprise server for sap applications 16.02.1.1-160000.3.1fixed
Suselibcupsfilterslinux enterprise server 16.02.1.1-160000.3.1fixed
Suselibcupsfilterslinux enterprise server for sap applications 16.02.1.1-160000.3.1fixed
Opensuselibcupsfiltersleap 16.02.1.1-160000.3.1fixed
Susecups-filterslinux enterprise module for basesystem 15 sp71.25.0-150200.3.31.1fixed
Susecups-filterslinux enterprise server ltss extended security 12 sp51.0.58-19.38.1fixed
Opensuselibcupsfilterstumbleweed2.1.1-2.1fixed
Opensusecups-filterstumbleweed1.28.17-9.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Suselibcupsfiltersrpmlinux enterprise server 16.02.1.1-160000.3.1Not reportedSUSE-SU-2026:23715-1Not reported
Suselibcupsfiltersrpmlinux enterprise server for sap applications 16.02.1.1-160000.3.1Not reportedSUSE-SU-2026:23715-1Not reported
Suselibcupsfiltersrpmlinux enterprise server 16.02.1.1-160000.3.1Not reportedSUSE-SU-2026:23695-1Not reported
Suselibcupsfiltersrpmlinux enterprise server for sap applications 16.02.1.1-160000.3.1Not reportedSUSE-SU-2026:23695-1Not reported
Opensuselibcupsfiltersrpmleap 16.02.1.1-160000.3.1Not reportedOPENSUSE-SU-2026:21818-1Not reported
Susecups-filtersrpmlinux enterprise module for basesystem 15 sp71.25.0-150200.3.31.1Not reportedSUSE-SU-2026:3935-1Not reported
Susecups-filtersrpmlinux enterprise server ltss extended security 12 sp51.0.58-19.38.1Not reportedSUSE-SU-2026:3918-1Not reported
Opensuselibcupsfiltersrpmtumbleweed2.1.1-2.1Not reportedOPENSUSE-SU-2026:11687-1Not reported
Opensusecups-filtersrpmtumbleweed1.28.17-9.1Not reportedOPENSUSE-SU-2026:11681-1Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [libcupsfilters2]Affected

    Source package: [libcupsfilters]

    Details (2)

    • 2.0.0-3+deb13u1 · amd64 · trixie

      Affected

      pypi · libcupsfilters · debian · 13

    • 2.0.0-3+deb13u1 · arm64 · trixie

      Affected

      pypi · libcupsfilters · debian · 13

  • [libcupsfilters2-common]Affected

    Source package: [libcupsfilters]

    Details (2)

    • 2.0.0-3+deb13u1 · all · trixie

      Affected

      pypi · libcupsfilters · debian · 13

    • 2.0.0-3+deb13u1 · all · trixie

      Affected

      pypi · libcupsfilters · debian · 13

  • [libcupsfilters2-dev]Affected

    Source package: [libcupsfilters]

    Details (2)

    • 2.0.0-3+deb13u1 · amd64 · trixie

      Affected

      pypi · libcupsfilters · debian · 13

    • 2.0.0-3+deb13u1 · arm64 · trixie

      Affected

      pypi · libcupsfilters · debian · 13

  • [libcupsfilters-tests]Affected

    Source package: [libcupsfilters]

    Details (2)

    • 2.0.0-3+deb13u1 · amd64 · trixie

      Affected

      pypi · libcupsfilters · debian · 13

    • 2.0.0-3+deb13u1 · arm64 · trixie

      Affected

      pypi · libcupsfilters · debian · 13

[openSUSE Tumbleweed]

  • [cups-filters]Affected

    Source package: [cups-filters]

    Details (1)

    • 1.28.17-8.3 · x86_64 · tumbleweed

      Affected · Fixed: 1.28.17-9.1

      pypi · cups-filters · opensuse · tumbleweed

  • [libcupsfilters]Affected

    Source package: [libcupsfilters]

    Details (1)

    • 2.1.1-1.7 · x86_64 · tumbleweed

      Affected · Fixed: 2.1.1-2.1

      pypi · libcupsfilters · opensuse · tumbleweed

  • [cups-filters-cups-browsed]Unknown

    Source package: [cups-filters]

    Details (1)

    • 1.28.17-8.3 · x86_64 · tumbleweed

      Unknown · Fixed: 1.28.17-9.1

      Version impact unknown

      pypi · cups-filters · opensuse · tumbleweed

  • [cups-filters-devel]Unknown

    Source package: [cups-filters]

    Details (1)

    • 1.28.17-8.3 · x86_64 · tumbleweed

      Unknown · Fixed: 1.28.17-9.1

      Version impact unknown

      pypi · cups-filters · opensuse · tumbleweed

  • [libcupsfilters2]Unknown

    Source package: [libcupsfilters]

    Details (1)

    • 2.1.1-1.7 · x86_64 · tumbleweed

      Unknown · Fixed: 2.1.1-2.1

      Version impact unknown

      pypi · libcupsfilters · opensuse · tumbleweed

  • [libcupsfilters-devel]Unknown

    Source package: [libcupsfilters]

    Details (1)

    • 2.1.1-1.7 · x86_64 · tumbleweed

      Unknown · Fixed: 2.1.1-2.1

      Version impact unknown

      pypi · libcupsfilters · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]