QwikSec

Security Database

CVE

CWE

Training

CVE-2025-61915

Published: Nov 29, 2025

Modified: Dec 3, 2025

PUBLISHED

CVSS v3.1

6.0

MEDIUM

Description

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15.

Vendor	Product	Versions
OpenPrinting	cups	affected `< 2.4.15`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

References

https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc

x_refsource_CONFIRM

https://github.com/OpenPrinting/cups/commit/db8d560262c22a21ee1e55dfd62fa98d9359bcb0

x_refsource_MISC

https://github.com/OpenPrinting/cups/releases/tag/v2.4.15

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.