A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.

The version of cups installed on the remote host is prior to 1.6.3-51. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2628 advisory.

    A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create files as root with 0644 permissions without the     ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions     prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups     versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version     2.3.3op2-2.1 and prior versions. (CVE-2021-25317)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - cups: insecure permissions of /var/log/cups allows for symlink attacks (CVE-2021-25317)

  - OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow     vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow     vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the     affected system. Exploitation of the vulnerability can be triggered when the configuration file     `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of     publication. (CVE-2023-32324)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - cups: insecure permissions of /var/log/cups allows for symlink attacks (CVE-2021-25317)

  - cups, libppd: Postscript Parsing Heap Overflow (CVE-2023-4504)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - cups: insecure permissions of /var/log/cups allows for symlink attacks (CVE-2021-25317)

  - cups, libppd: Postscript Parsing Heap Overflow (CVE-2023-4504)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the cups packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create files as root with 0644 permissions without the     ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions     prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups     versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version     2.3.3op2-2.1 and prior versions. (CVE-2021-25317)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the cups packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

  - A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create files as root with 0644 permissions without the     ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions     prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups     versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version     2.3.3op2-2.1 and prior versions. (CVE-2021-25317)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big     Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may     be able to read restricted memory. (CVE-2020-10001)

  - A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create files as root with 0644 permissions without the     ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions     prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups     versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version     2.3.3op2-2.1 and prior versions. (CVE-2021-25317)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A Incorrect Default Permissions vulnerability in the     packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack     Cloud Crowbar 9 openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create     files as root with 0644 permissions without the ability     to set the content.(CVE-2021-25317)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A Incorrect Default Permissions vulnerability in the     packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack     Cloud Crowbar 9 openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create     files as root with 0644 permissions without the ability     to set the content. This issue affects: SUSE Linux     Enterprise Server 11-SP4-LTSS cups versions prior to     1.3.9. SUSE Manager Server 4.0 cups versions prior to     2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions     prior to 1.7.5. openSUSE Leap 15.2 cups versions prior     to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1     and prior versions.(CVE-2021-25317)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A Incorrect Default Permissions vulnerability in the     packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack     Cloud Crowbar 9 openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create     files as root with 0644 permissions without the ability     to set the content. This issue affects: SUSE Linux     Enterprise Server 11-SP4-LTSS cups versions prior to     1.3.9. SUSE Manager Server 4.0 cups versions prior to     2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions     prior to 1.7.5. openSUSE Leap 15.2 cups versions prior     to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1     and prior versions(CVE-2021-25317)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A Incorrect Default Permissions vulnerability in the     packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack     Cloud Crowbar 9 openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create     files as root with 0644 permissions without the ability     to set the content. This issue affects: SUSE Linux     Enterprise Server 11-SP4-LTSS cups versions prior to     1.3.9. SUSE Manager Server 4.0 cups versions prior to     2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions     prior to 1.7.5. openSUSE Leap 15.2 cups versions prior     to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1     and prior versions.(CVE-2021-25317)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A Incorrect Default Permissions vulnerability in the     packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack     Cloud Crowbar 9 openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create     files as root with 0644 permissions without the ability     to set the content. This issue affects: SUSE Linux     Enterprise Server 11-SP4-LTSS cups versions prior to     1.3.9. SUSE Manager Server 4.0 cups versions prior to     2.2.7. SUSE OpenStack(CVE-2021-25317)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the cups package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - In macOS High Sierra before 10.13.5, an issue existed     in CUPS. This issue was addressed with improved access     restrictions.(CVE-2018-4181)

  - It was discovered that CUPS allows non-root users to     pass environment variables to CUPS backends. Affected     backends use attacker-controlled environment variables     without proper sanitization. A local attacker, who is     part of one of the groups specified in the SystemGroups     directive, could use the cupsctl binary to set SetEnv     and PassEnv directives and potentially controls the     flow of the affected backend, resulting in some cases     in arbitrary code execution with root     privileges.(CVE-2018-4180)

  - A Incorrect Default Permissions vulnerability in the     packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack     Cloud Crowbar 9 openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create     files as root with 0644 permissions without the ability     to set the content. This issue affects: SUSE Linux     Enterprise Server 11-SP4-LTSS cups versions prior to     1.3.9. SUSE Manager Server 4.0 cups versions prior to     2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions     prior to 1.7.5. openSUSE Leap 15.2 cups versions prior     to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1     and prior versions.(CVE-2021-25317)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:14712-1 advisory.

  - A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server     11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows     local attackers with control of the lp users to create files as root with 0644 permissions without the     ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions     prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups     versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version     2.3.3op2-2.1 and prior versions. (CVE-2021-25317)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for cups fixes the following issues :

  - CVE-2021-25317: ownership of /var/log/cups could allow     privilege escalation from lp user to root via symlink     attacks (bsc#1184161)

This update was imported from the SUSE:SLE-15:Update update project.

This update for cups fixes the following issues :

CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
206017	Amazon Linux 2 : cups (ALAS-2024-2628)	Nessus	Amazon Linux Local Security Checks	low
198681	RHEL 7 : cups (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	low
198663	RHEL 9 : cups (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198600	RHEL 8 : cups (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
157979	EulerOS Virtualization 3.0.6.0 : cups (EulerOS-SA-2022-1061)	Nessus	Huawei Local Security Checks	low
157956	EulerOS Virtualization 3.0.6.6 : cups (EulerOS-SA-2022-1115)	Nessus	Huawei Local Security Checks	medium
156500	EulerOS Virtualization 3.0.2.6 : cups (EulerOS-SA-2021-2898)	Nessus	Huawei Local Security Checks	medium
153298	EulerOS 2.0 SP2 : cups (EulerOS-SA-2021-2363)	Nessus	Huawei Local Security Checks	low
153070	EulerOS 2.0 SP5 : cups (EulerOS-SA-2021-2324)	Nessus	Huawei Local Security Checks	low
152344	EulerOS 2.0 SP8 : cups (EulerOS-SA-2021-2289)	Nessus	Huawei Local Security Checks	low
152296	EulerOS 2.0 SP9 : cups (EulerOS-SA-2021-2264)	Nessus	Huawei Local Security Checks	low
152279	EulerOS 2.0 SP9 : cups (EulerOS-SA-2021-2238)	Nessus	Huawei Local Security Checks	low
151559	EulerOS Virtualization 2.9.0 : cups (EulerOS-SA-2021-2203)	Nessus	Huawei Local Security Checks	low
151552	EulerOS Virtualization 2.9.1 : cups (EulerOS-SA-2021-2190)	Nessus	Huawei Local Security Checks	low
151308	EulerOS Virtualization for ARM 64 3.0.2.0 : cups (EulerOS-SA-2021-2120)	Nessus	Huawei Local Security Checks	high
150572	SUSE SLES11 Security Update : cups (SUSE-SU-2021:14712-1)	Nessus	SuSE Local Security Checks	low
149557	openSUSE Security Update : cups (openSUSE-2021-638)	Nessus	SuSE Local Security Checks	low
149230	SUSE SLES12 Security Update : cups (SUSE-SU-2021:1453-1)	Nessus	SuSE Local Security Checks	low
149225	SUSE SLED15 / SLES15 Security Update : cups (SUSE-SU-2021:1454-1)	Nessus	SuSE Local Security Checks	low

Detections

Analytics

CVE-2021-25317

low

Tenable Plugins

low

low

high

high

low

medium

medium

low

low

low

low

low

low

low

high

low

low

low

low