Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-34979

Опубликовано: 03 апр. 2026
Источник: redhat
CVSS3: 5.3
EPSS Низкий

Описание

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer overflow in the CUPS scheduler when building filter option strings from job attribute. At time of publication, there are no publicly available patches.

A flaw was found in OpenPrinting CUPS. A remote attacker could exploit a heap-based buffer overflow by sending specially crafted job attributes when building filter option strings. This could lead to a denial of service, making the printing system unavailable.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10cupsFix deferred
Red Hat Enterprise Linux 6cupsOut of support scope
Red Hat Enterprise Linux 7cupsOut of support scope
Red Hat Enterprise Linux 8cupsFix deferred
Red Hat Enterprise Linux 9cupsFix deferred
Red Hat OpenShift Container Platform 4rhcosFix deferred
Red Hat Hardened Imagescups-main-2.4.17-1.hum1FixedRHSA-2026:881417.04.2026

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-120
https://bugzilla.redhat.com/show_bug.cgi?id=2454946cups: OpenPrinting CUPS: Denial of Service via heap-based buffer overflow in job attribute processing

EPSS

Процентиль: 31%
0.00379
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
4 месяца назад

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer overflow in the CUPS scheduler when building filter option strings from job attribute. At time of publication, there are no publicly available patches.

CVSS3: 5.3
nvd
4 месяца назад

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer overflow in the CUPS scheduler when building filter option strings from job attribute. At time of publication, there are no publicly available patches.

CVSS3: 5.3
msrc
4 месяца назад

OpenPrinting CUPS: Heap overflow in `get_options()`

CVSS3: 5.3
debian
4 месяца назад

OpenPrinting CUPS is an open source printing system for Linux and othe ...

CVSS3: 5.3
fstec
4 месяца назад

Уязвимость функции get_options сервера печати CUPS, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 31%
0.00379
Низкий

5.3 Medium

CVSS3