受影响的版本系列
已知漏洞
| CVE | 标题 | 受影响版本 | CVSS | 被利用 | EPSS | 发布日期 |
|---|---|---|---|---|---|---|
| CVE-2026-61702 | OpenPrinting CUPS: root-side banner file disclosure | * | 5.3 | — | 2026-10-16 | |
| CVE-2026-55453 | CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip | * | 3.3 | — | 2026-10-16 | |
| CVE-2026-55480 | CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root) | * | 5.7 | — | 2026-10-16 | |
| CVE-2026-55467 | CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix) | * | 2.5 | — | 2026-10-16 | |
| CVE-2026-107655 | Cups: null pointer dereference via embedded job ticket comments allows remote denial of service | * | 4.0 | — | 2026-10-09 | |
| CVE-2026-107890 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-c... | < 2.4.20 | 3.3 | — | 2026-10-09 | |
| CVE-2026-107888 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-... | < 2.4.20 | 5.1 | — | 2026-10-09 | |
| CVE-2026-107886 | OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class... | ≥ 1.4.8 < 2.4.20 | 2.3 | — | 2026-10-09 | |
| CVE-2026-107885 | OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handli... | ≤ 2.4.20 | 3.3 | — | 2026-10-09 | |
| CVE-2026-105326 | Cups: cups: argument injection in mailto notifier via notify-recipient-uri | * | 2.5 | — | 2026-10-06 | |
| CVE-2026-87876 | Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447... | * | 3.0 | — | 2026-09-10 | |
| CVE-2026-87875 | Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound | * | 4.3 | — | 2026-09-10 | |
| CVE-2026-41079 | OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated us... | * | 4.3 | — | 2026-04-25 | |
| CVE-2026-39316 | CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer | * | 4.0 | — | 2026-04-08 | |
| CVE-2026-39314 | CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-suppor... | * | 4.0 | — | 2026-04-08 | |
| CVE-2026-34980 | OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over th... | * | 6.1 | — | 2026-04-04 | |
| CVE-2026-34979 | OpenPrinting CUPS: Heap overflow in `get_options()` | * | 5.3 | — | 2026-04-04 | |
| CVE-2026-34978 | OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clo... | * | 6.5 | — | 2026-04-04 | |
| CVE-2026-34990 | OpenPrinting CUPS: Local print admin token disclosure using temporary printers | * | 5.0 | — | 2026-04-04 | |
| CVE-2026-27447 | OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup | * | 4.8 | — | 2026-04-04 | |
| CVE-2025-58436 | OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack | * | 5.1 | — | 2025-11-29 | |
| CVE-2025-61915 | OpenPrinting CUPS vulnerable to stack based out-of-bound write | * | 6.0 | — | 2025-11-29 | |
| CVE-2025-58364 | cups: Remote DoS via null dereference | * | 6.5 | — | 2025-09-12 | |
| CVE-2025-58060 | cups has Authentication bypass with AuthType Negotiate | * | 8.0 | — | 2025-09-12 | |
| CVE-2024-47850 | CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response... | * | 7.5 | — | 2024-10-04 | |
| CVE-2024-35235 | Cupsd Listen arbitrary chmod 0140777 | * | 4.4 | — | 2024-06-11 | |
| CVE-2023-4504 | OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow | < 2.4.6 | 7.0 | — | 2023-09-22 | |
| CVE-2023-34241 | CUPS vulnerable to use-after-free in cupsdAcceptClient() | * | 5.3 | — | 2023-06-23 | |
| CVE-2023-32324 | OpenPrinting CUPS vulnerable to heap buffer overflow | * | 7.5 | — | 2023-06-02 | |
| CVE-2022-26691 | A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Ca... | * | — | — | 2022-05-27 |
数据来源：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS 详见 https://www.first.org/epss）、endoflife.date。软件列表：awesome-selfhosted（CC BY-SA 3.0）。