According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - CUPS printing system provides a portable printing layer     for UNIXA(r) operating systems. It has been developed by     Apple Inc.to promote a standard printing solution for     all UNIX vendors and users.CUPS provides the System V     and Berkeley command-line interfaces.

  - Security fix(es):

  - The session cookie generated by the CUPS web interface     was easy to guess on Linux, allowing unauthorized     scripted access to the web interface when the web     interface is enabled. (CVE-2018-4300)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - The session cookie generated by the CUPS web interface     was easy to guess on Linux, allowing unauthorized     scripted access to the web interface when the web     interface is enabled. This issue affected versions     prior to v2.2.10.(CVE-2018-4300)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has cups packages installed that are affected by multiple vulnerabilities:

  - In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved     access restrictions. (CVE-2018-4180, CVE-2018-4181)

  - The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized     scripted access to the web interface when the web interface is enabled. This issue affected versions prior     to v2.2.10. (CVE-2018-4300)

  - ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a     duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate.
    All references and descriptions in this candidate have been removed to prevent accidental usage.
    (CVE-2018-4700)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An issue has been found in cups, the Common UNIX Printing System(tm).

While generating a session cookie for the CUPS web interface, a predictable random number seed was used. This could lead to unauthorized scripted access to the enabled web interface.

For Debian 8 'Jessie', this problem has been fixed in version 1.7.5-11+deb8u6.

We recommend that you upgrade your cups packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has cups packages installed that are affected by multiple vulnerabilities:

  - In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved     access restrictions. (CVE-2018-4180, CVE-2018-4181)

  - The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized     scripted access to the web interface when the web interface is enabled. This issue affected versions prior     to v2.2.10. (CVE-2018-4300)

  - ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a     duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate.
    All references and descriptions in this candidate have been removed to prevent accidental usage.
    (CVE-2018-4700)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - cups: stack-buffer-overflow in libcups's asn1_get_packed function (CVE-2019-8696)

  - A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows     remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in     conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS server (neither     the OS nor the web browser is responsible for ensuring that localhost.localdomain is 127.0.0.1).
    (CVE-2017-18190)

  - In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved     access restrictions. (CVE-2018-4180, CVE-2018-4181)

  - The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized     scripted access to the web interface when the web interface is enabled. This issue affected versions prior     to v2.2.10. (CVE-2018-4300)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a     duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate.
    All references and descriptions in this candidate have been removed to prevent accidental usage     (CVE-2018-4700)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave     10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a     privileged network position may be able to execute arbitrary code. (CVE-2019-8675)

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

  - A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina     10.15.4. An application may be able to gain elevated privileges. (CVE-2020-3898)

  - A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create files as root with 0644 permissions without the     ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions     prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups     versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version     2.3.3op2-2.1 and prior versions. (CVE-2021-25317)

  - OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow     vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow     vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the     affected system. Exploitation of the vulnerability can be triggered when the configuration file     `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of     publication. (CVE-2023-32324)

  - An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur     11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently     printed documents. (CVE-2023-32360)

  - OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like     operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to     the logging service AFTER the connection has been closed, when it should have logged the data right     before. This is a use-after-free bug that impacts the entire cupsd process. The exact cause of this issue     is the function `httpClose(con->http)` being called in `scheduler/client.c`. The problem is that httpClose     always, provided its argument is not null, frees the pointer at the end of the call, only for     cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function `cupsdAcceptClient`     if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address     (HostNameLookups Double is set in `cupsd.conf`) which fails to resolve, or if CUPS is compiled with TCP     wrappers and the connection is refused by rules from `/etc/hosts.allow` and `/etc/hosts.deny`. Version     2.4.6 has a patch for this issue. (CVE-2023-34241)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the version of the cups package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - The session cookie generated by the CUPS web interface     was easy to guess on Linux, allowing unauthorized     scripted access to the web interface when the web     interface is enabled. This issue affected versions     prior to v2.2.10.(CVE-2018-4300)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1050 advisory.

  - cups: Local privilege escalation to root due to insecure environment variable handling (CVE-2018-4180)

  - cups: Manipulation of cupsd.conf by a local attacker resulting in limited reads of arbitrary files as root     (CVE-2018-4181)

  - cups: Session cookie generated by the CUPS web interface is easy to guess (CVE-2018-4300)

  - cups: Predictable session cookie breaks CSRF protection (CVE-2018-4700)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - cups: stack-buffer-overflow in libcups's asn1_get_packed function (CVE-2019-8696)

  - In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved     access restrictions. (CVE-2018-4180, CVE-2018-4181)

  - The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized     scripted access to the web interface when the web interface is enabled. This issue affected versions prior     to v2.2.10. (CVE-2018-4300)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a     duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate.
    All references and descriptions in this candidate have been removed to prevent accidental usage     (CVE-2018-4700)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave     10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a     privileged network position may be able to execute arbitrary code. (CVE-2019-8675)

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

  - A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina     10.15.4. An application may be able to gain elevated privileges. (CVE-2020-3898)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
125495	EulerOS 2.0 SP5 : cups (EulerOS-SA-2019-1568)	Nessus	Huawei Local Security Checks	5/29/2019	1/6/2021	medium
125557	EulerOS Virtualization 3.0.1.0 : cups (EulerOS-SA-2019-1605)	Nessus	Huawei Local Security Checks	5/30/2019	1/6/2021	medium
125494	EulerOS 2.0 SP3 : cups (EulerOS-SA-2019-1567)	Nessus	Huawei Local Security Checks	5/29/2019	1/6/2021	medium
143926	NewStart CGSL CORE 5.04 / MAIN 5.04 : cups Multiple Vulnerabilities (NS-SA-2020-0067)	Nessus	NewStart CGSL Local Security Checks	12/9/2020	5/11/2022	high
129410	Debian DLA-1936-1 : cups security update	Nessus	Debian Local Security Checks	9/30/2019	4/22/2024	medium
125493	EulerOS 2.0 SP2 : cups (EulerOS-SA-2019-1566)	Nessus	Huawei Local Security Checks	5/29/2019	1/6/2021	medium
143972	NewStart CGSL CORE 5.05 / MAIN 5.05 : cups Multiple Vulnerabilities (NS-SA-2020-0102)	Nessus	NewStart CGSL Local Security Checks	12/9/2020	5/11/2022	high
196342	RHEL 6 : cups (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	high
124730	EulerOS Virtualization 2.5.3 : cups (EulerOS-SA-2019-1352)	Nessus	Huawei Local Security Checks	5/10/2019	1/6/2021	medium
125574	EulerOS Virtualization for ARM 64 3.0.2.0 : cups (EulerOS-SA-2019-1622)	Nessus	Huawei Local Security Checks	5/30/2019	1/6/2021	medium
135077	RHEL 7 : cups (RHSA-2020:1050)	Nessus	Red Hat Local Security Checks	4/1/2020	4/27/2024	high
196273	RHEL 5 : cups (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	high

Detections

Analytics

Plugins Search

medium

medium

medium

high

medium

medium

high

high

medium

medium

high

high