Detections
Analytics

MiracleLinux 3 : cups-1.2.4-11.18.1.1AXS3 (AXSA:2008-75:01)

medium Nessus Plugin ID 284181

Synopsis

The remote MiracleLinux host is missing a security update.

Description

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2008-75:01 advisory.

 Description of problem:
 The Common UNIX Printing System (CUPS) provides a portable printing layer for UNIX operating systems.
 An integer overflow flaw leading to a heap buffer overflow was discovered in the Portable Network Graphics (PNG) decoding routines used by the CUPS image converting filters imagetops and imagetoraster. An attacker could create a malicious PNG file that could possibly execute arbitrary code as the lp user if the file was printed. (CVE-2008-1722) All CUPS users are advised to upgrade to these updated packages, which contain backported patch to resolve this issue.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected cups, cups-devel and / or cups-libs packages.

See Also

https://tsn.miraclelinux.com/en/node/172

Plugin Details

Severity: Medium

ID: 284181

File Name: miracle_linux_AXSA-2008-75.nasl

Version: 1.1

Type: local

Published: 1/14/2026

Updated: 1/14/2026

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS Score Source: CVE-2008-1722

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:miracle:linux:cups-devel, p-cpe:/a:miracle:linux:cups, p-cpe:/a:miracle:linux:cups-libs, cpe:/o:miracle:linux:3

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/MiracleLinux/release, Host/MiracleLinux/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 8/13/2008

Vulnerability Publication Date: 4/8/2008

Reference Information

CVE: CVE-2008-1722