OpenPrinting CUPS

cups has Authentication bypass with AuthType Negotiate

OpenPrinting CUPS: Local print admin token disclosure using temporary printers

OpenPrinting CUPS vulnerable to heap buffer overflow

OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.

CUPS vulnerable to use-after-free in cupsdAcceptClient()

OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow

Cupsd Listen arbitrary chmod 0140777

OpenPrinting CUPS vulnerable to stack based out-of-bound write

cups: Remote DoS via null dereference

OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)

OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup

CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer

CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`

OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack

OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users

OpenPrinting CUPS: Heap overflow in `get_options()`