CVE-2026-107655
MEDIUM
4,0
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: low
Description
AI Translation Available
A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Internet Printing Protocol (IPP) request to crash the print daemon, resulting in a temporary Denial of Service (DoS) for all printing services.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0013
Percentile
0,0th
Updated
EPSS Score Trend (Last 3 Days)
476
NULL Pointer Dereference
StableCommon Consequences
Security Scopes Affected:
Availability
Integrity
Confidentiality
Potential Impacts:
Dos: Crash, Exit, Or Restart
Execute Unauthorized Code Or Commands
Read Memory
Modify Memory
Applicable Platforms
Languages:
C, C++, Java, C#, Go
https://github.com/OpenPrinting/cups/security/advisories/GHSA-58wv-9ffm-5w78
https://access.redhat.com/security/cve/CVE-2026-107655
https://bugzilla.redhat.com/show_bug.cgi?id=2548399
https://github.com/OpenPrinting/cups/commit/12237ad
https://github.com/OpenPrinting/cups/commit/25d6830
https://github.com/OpenPrinting/cups/security/advisories/GHSA-58wv-9ffm-5w78