Apple Cups vulnerabilities

56 CVEs affecting Apple Cups, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-26691, published 2022-05-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-3641, published 2008-10-10. High severity, CVSS 10.0. EPSS: 24.1% chance of exploitation in the next 30 days. The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.
CVE-2009-0949, published 2009-06-09. High severity, CVSS 7.5. EPSS: 19.6% chance of exploitation in the next 30 days. The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL…
CVE-2011-2896, published 2011-08-19. Medium severity, CVSS 5.1. EPSS: 12% chance of exploitation in the next 30 days. The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the…
CVE-2008-5183, published 2008-11-21. High severity, CVSS 7.5. EPSS: 9.2% chance of exploitation in the next 30 days. cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL…
CVE-2007-3387, published 2007-07-30. Medium severity, CVSS 6.8. EPSS: 8.6% chance of exploitation in the next 30 days. Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and…
CVE-2008-0053, published 2008-03-18. High severity, CVSS 10.0. EPSS: 8.3% chance of exploitation in the next 30 days. Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file.
CVE-2009-1182, published 2009-04-23. High severity, CVSS 7.5. EPSS: 7.3% chance of exploitation in the next 30 days. Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via…
CVE-2010-1748, published 2010-06-17. Medium severity, CVSS 4.3. EPSS: 6.5% chance of exploitation in the next 30 days. The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly…
CVE-2010-2941, published 2010-11-05. Critical severity, CVSS 9.8. EPSS: 6.4% chance of exploitation in the next 30 days. ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service…
CVE-2009-1179, published 2009-04-23. Medium severity, CVSS 6.8. EPSS: 5.5% chance of exploitation in the next 30 days. Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted…

Latest

CVE-2022-26691, published 2022-05-26. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain…
CVE-2012-6094, published 2019-12-20. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system
CVE-2018-4300, published 2019-04-03. Medium severity, CVSS 5.9. EPSS: 1.8% chance of exploitation in the next 30 days. The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected…
CVE-2017-18248, published 2018-03-26. Medium severity, CVSS 5.3. EPSS: 2.2% chance of exploitation in the next 30 days. The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus…
CVE-2017-18190, published 2018-02-16. High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days. A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS…
CVE-2014-9679, published 2015-02-19. Medium severity, CVSS 6.8. EPSS: 4.6% chance of exploitation in the next 30 days. Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which…
CVE-2014-5031, published 2014-07-29. Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days. The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.
CVE-2014-5030, published 2014-07-29. Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days. CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.
CVE-2014-5029, published 2014-07-29. Low severity, CVSS 1.5. EPSS: 0.3% chance of exploitation in the next 30 days. The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this…
CVE-2014-3537, published 2014-07-23. Low severity, CVSS 1.2. EPSS: 0.4% chance of exploitation in the next 30 days. The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.