Detections
Analytics

Echo: cups: security update to 2.4.18-1+e4

medium Tenable Self-Hosted Container Security Plugin ID 474859

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior
 to 2.4.20, copy_model() in scheduler/ipp.c creates a predictable TempDir/<connection-number>.ppd path in
 an lp-group-writable directory and opens it as root without O_EXCL or O_NOFOLLOW. Exploitation requires an
 lp-group process able to write that directory to predict the connection-derived name and plant a symlink
 before the root open, while a privileged add-printer or modify-printer operation using a model PPD
 triggers copy_model(). The reporter treats an existing lp foothold and the privileged operation as
 distinct prerequisites, while the maintainer assesses high privileges because installing the relevant
 filter or administering the printer requires root or print-administrator access. If the race succeeds, the
 root scheduler follows the symlink and truncates or overwrites a root-writable target with generated PPD
 data, compromising file integrity or availability. This issue is fixed in version 2.4.20. (CVE-2026-55480)

Solution

Update the cups library and its related packages to version 2.4.18-1+e4 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-55480

Plugin Details

Severity: Medium

ID: 474859

Version: Revision 1.2

Type: Local

Published: 10/16/2026

Updated: 10/21/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.54

CVSS v2

Risk Factor: Medium

Base Score: 5.3

Temporal Score: 4.1

Vector: CVSS2#AV:L/AC:H/Au:M/C:N/I:C/A:C

CVSS Score Source: CVE-2026-55480

CVSS v3

Risk Factor: Medium

Base Score: 5.7

Temporal Score: 5.1

Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/6/2026

Vulnerability Publication Date: 10/15/2026

Reference Information

CVE: CVE-2026-55480