An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to read restricted memory.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4393 advisory.

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5454-2 advisory.

  - A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina     10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain     configurations, a remote attacker may be able to submit arbitrary print jobs. (CVE-2019-8842)

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

  - A logic issue was addressed with improved state management. This issue is fixed in Security Update     2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated     privileges. (CVE-2022-26691)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 21.10 / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5454-1 advisory.

  - A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina     10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. In certain     configurations, a remote attacker may be able to submit arbitrary print jobs. (CVE-2019-8842)

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

  - A logic issue was addressed with improved state management. This issue is fixed in Security Update     2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated     privileges. (CVE-2022-26691)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the cups packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the cups packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

  - A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create files as root with 0644 permissions without the     ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions     prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups     versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version     2.3.3op2-2.1 and prior versions. (CVE-2021-25317)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4393 advisory.

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

  - A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create files as root with 0644 permissions without the     ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions     prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups     versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version     2.3.3op2-2.1 and prior versions. (CVE-2021-25317)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4393 advisory.

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4393 advisory.

  - cups: access to uninitialized buffer in ipp.c (CVE-2020-10001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4393 advisory.

  - cups: access to uninitialized buffer in ipp.c (CVE-2020-10001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2800 advisory.

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the cups packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - access to uninitialized buffer in ipp.c(CVE-2020-10001)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - CUPS printing system provides a portable printing layer     for UNIX(r) operating systems. It has been developed by     Apple Inc. to promote a standard printing solution for     all UNIX vendors and users. CUPS provides the System V     and Berkeley command-line interfaces.Security     Fix(es):An input validation issue was addressed with     improved memory handling. This issue is fixed in macOS     Big Sur 11.1, Security Update 2020-001 Catalina,     Security Update 2020-007 Mojave. A malicious     application may be able to read restricted     memory.(CVE-2020-10001)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-db5caaeb91 advisory.

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for cups fixes the following issues :

  - CVE-2020-10001: Fixed an out-of-bounds read in the     ippReadIO function (bsc#1180520).

  - CVE-2019-8842: Fixed an out-of-bounds read in an     extension field (bsc#1170671).

This update was imported from the SUSE:SLE-15:Update update project.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-ef84cd3f69 advisory.

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for cups fixes the following issues :

CVE-2020-10001: Fixed an out-of-bounds read in the ippReadIO function (bsc#1180520).

CVE-2019-8842: Fixed an out-of-bounds read in an extension field (bsc#1170671).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
184958	Rocky Linux 8 : cups (RLSA-2021:4393)	Nessus	Rocky Linux Local Security Checks	medium
161728	Ubuntu 16.04 ESM : CUPS vulnerabilities (USN-5454-2)	Nessus	Ubuntu Local Security Checks	medium
161723	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : CUPS vulnerabilities (USN-5454-1)	Nessus	Ubuntu Local Security Checks	medium
159862	EulerOS Virtualization 2.10.0 : cups (EulerOS-SA-2022-1395)	Nessus	Huawei Local Security Checks	medium
159846	EulerOS Virtualization 2.10.1 : cups (EulerOS-SA-2022-1369)	Nessus	Huawei Local Security Checks	medium
158399	EulerOS 2.0 SP10 : cups (EulerOS-SA-2022-1201)	Nessus	Huawei Local Security Checks	medium
158382	EulerOS 2.0 SP10 : cups (EulerOS-SA-2022-1220)	Nessus	Huawei Local Security Checks	medium
158306	EulerOS 2.0 SP3 : cups (EulerOS-SA-2022-1160)	Nessus	Huawei Local Security Checks	medium
157956	EulerOS Virtualization 3.0.6.6 : cups (EulerOS-SA-2022-1115)	Nessus	Huawei Local Security Checks	medium
157720	AlmaLinux 8 : cups (ALSA-2021:4393)	Nessus	Alma Linux Local Security Checks	medium
157192	EulerOS 2.0 SP9 : cups (EulerOS-SA-2022-1002)	Nessus	Huawei Local Security Checks	medium
157173	EulerOS 2.0 SP9 : cups (EulerOS-SA-2022-1022)	Nessus	Huawei Local Security Checks	medium
156500	EulerOS Virtualization 3.0.2.6 : cups (EulerOS-SA-2021-2898)	Nessus	Huawei Local Security Checks	medium
156363	EulerOS Virtualization 3.0.2.0 : cups (EulerOS-SA-2021-2849)	Nessus	Huawei Local Security Checks	medium
155426	Oracle Linux 8 : cups (ELSA-2021-4393)	Nessus	Oracle Linux Local Security Checks	medium
155285	EulerOS 2.0 SP5 : cups (EulerOS-SA-2021-2655)	Nessus	Huawei Local Security Checks	medium
155101	RHEL 8 : cups (RHSA-2021:4393)	Nessus	Red Hat Local Security Checks	medium
155027	CentOS 8 : cups (CESA-2021:4393)	Nessus	CentOS Local Security Checks	medium
154739	Debian DLA-2800-1 : cups - LTS security update	Nessus	Debian Local Security Checks	medium
151174	EulerOS Virtualization for ARM 64 3.0.6.0 : cups (EulerOS-SA-2021-1996)	Nessus	Huawei Local Security Checks	medium
149583	EulerOS 2.0 SP8 : cups (EulerOS-SA-2021-1867)	Nessus	Huawei Local Security Checks	medium
146414	Fedora 32 : 1:cups (2021-db5caaeb91)	Nessus	Fedora Local Security Checks	medium
146298	openSUSE Security Update : cups (openSUSE-2021-253)	Nessus	SuSE Local Security Checks	medium
146286	Fedora 33 : 1:cups (2021-ef84cd3f69)	Nessus	Fedora Local Security Checks	medium
146156	SUSE SLED15 / SLES15 Security Update : cups (SUSE-SU-2021:0285-1)	Nessus	SuSE Local Security Checks	medium
146145	SUSE SLES12 Security Update : cups (SUSE-SU-2021:0286-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2020-10001

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium