CVE-2025-61915
Medium · 6.0CVSS
6.0
EPSS
0.5%
Published
Nov 29, 2025
CISA due date
—
The record
OpenPrinting CUPS vulnerable to stack based out-of-bound write
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:10 | cups | 0 | 1:2.4.10-12.el10_1.2 |
| AlmaLinux:10 | cups-client | 0 | 1:2.4.10-12.el10_1.2 |
| AlmaLinux:10 | cups-devel | 0 | 1:2.4.10-12.el10_1.2 |
| AlmaLinux:10 | cups-filesystem | 0 | 1:2.4.10-12.el10_1.2 |
| AlmaLinux:10 | cups-ipptool | 0 | 1:2.4.10-12.el10_1.2 |
| AlmaLinux:10 | cups-libs | 0 | 1:2.4.10-12.el10_1.2 |
| AlmaLinux:10 | cups-lpd | 0 | 1:2.4.10-12.el10_1.2 |
| AlmaLinux:10 | cups-printerapp | 0 | 1:2.4.10-12.el10_1.2 |
| AlmaLinux:8 | cups | 0 | 1:2.2.6-66.el8_10 |
| AlmaLinux:8 | cups-client | 0 | 1:2.2.6-66.el8_10 |
| AlmaLinux:8 | cups-devel | 0 | 1:2.2.6-66.el8_10 |
| AlmaLinux:8 | cups-filesystem | 0 | 1:2.2.6-66.el8_10 |
| AlmaLinux:8 | cups-ipptool | 0 | 1:2.2.6-66.el8_10 |
| AlmaLinux:8 | cups-libs | 0 | 1:2.2.6-66.el8_10 |
| AlmaLinux:8 | cups-lpd | 0 | 1:2.2.6-66.el8_10 |
| AlmaLinux:9 | cups | 0 | 1:2.3.3op2-34.el9_7.2 |
| AlmaLinux:9 | cups-client | 0 | 1:2.3.3op2-34.el9_7.2 |
| AlmaLinux:9 | cups-devel | 0 | 1:2.3.3op2-34.el9_7.2 |
| AlmaLinux:9 | cups-filesystem | 0 | 1:2.3.3op2-34.el9_7.2 |
| AlmaLinux:9 | cups-ipptool | 0 | 1:2.3.3op2-34.el9_7.2 |
| AlmaLinux:9 | cups-libs | 0 | 1:2.3.3op2-34.el9_7.2 |
| AlmaLinux:9 | cups-lpd | 0 | 1:2.3.3op2-34.el9_7.2 |
| AlmaLinux:9 | cups-printerapp | 0 | 1:2.3.3op2-34.el9_7.2 |
| Mageia:9 | cups | 0 | 2.4.6-1.5.mga9 |
| SUSE:Linux Enterprise Micro 5.2 | cups | 0 | 2.2.7-150000.3.77.1 |
| SUSE:Linux Enterprise Micro 5.3 | cups | 0 | 2.2.7-150000.3.77.1 |
| SUSE:Linux Enterprise Micro 5.4 | cups | 0 | 2.2.7-150000.3.77.1 |
| SUSE:Linux Enterprise Micro 5.5 | cups | 0 | 2.2.7-150000.3.77.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | cups | 0 | 2.2.7-150000.3.77.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | cups | 0 | 2.2.7-150000.3.77.1 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 | cups | 0 | 2.2.7-150000.3.77.1 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 | cups | 0 | 2.2.7-150000.3.77.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | cups | 0 | 2.2.7-150000.3.77.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP7 | cups | 0 | 2.2.7-150000.3.77.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | cups | 0 | 1.7.5-20.57.1 |
| SUSE:Linux Micro 6.0 | cups | 0 | 2.4.16-1.1 |
| SUSE:Linux Micro 6.1 | cups | 0 | 2.4.16-slfo.1.1_1.1 |
| openSUSE:Leap 15.6 | cups | 0 | 2.2.7-150000.3.77.1 |
| openSUSE:Leap 16.0 | cups | 0 | 2.4.16-160000.1.1 |
| openSUSE:Tumbleweed | cups | 0 | 2.4.16-1.1 |
Related vulnerabilities
- CVE-2025-58436 OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack Also affects cups
- CVE-2024-47175 CUPS is a standards-based, open-source printing system, and `libppd` can be used for… Also affects cups
- CVE-2023-32360 An authentication issue was addressed with improved state management. Also affects cups
- CVE-2024-47176 CUPS is a standards-based, open-source printing system, and `cups-browsed` contains… Also affects cups
- CVE-2024-47076 CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the… Also affects cups
- CVE-2024-47177 CUPS is a standards-based, open-source printing system, and cups-filters provides… Also affects cups
- CVE-2026-41079 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… Also affects cups
- CVE-2026-39316 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… Also affects cups