REDHAT-BUG-2454954: Medium severity OpenPrinting CUPS vulnerability

Published Apr 3, 2026
·
Updated

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a shared target queue, an unauthorized client can send a Print-Job to that shared PostScript queue without authentication. The server accepts a page-border value supplied as textWithoutLanguage, preserves an embedded newline through option escaping and reparse, and then reparses the resulting second-line PPD: text as a trusted scheduler control record. A follow-up raw print job can therefore make the server execute an attacker-chosen existing binary such as /usr/bin/vim as lp. At time of publication, there are no publicly available patches.

Affected Software

1 affected component
OpenPrinting CUPS<=2.4.16

Event History

Apr 3, 2026
Data Sourced
via Red Hat·10:01 PM
DescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-2454954?

The severity of REDHAT-BUG-2454954 is classified as medium with a risk score of 4.

2

What are the potential implications of REDHAT-BUG-2454954?

The potential implications of REDHAT-BUG-2454954 include unauthorized clients being able to send print jobs to shared PostScript queues without authentication.

3

How do I fix REDHAT-BUG-2454954?

To fix REDHAT-BUG-2454954, upgrade OpenPrinting CUPS to version 2.4.17 or later.

4

In which versions of OpenPrinting CUPS does REDHAT-BUG-2454954 exist?

REDHAT-BUG-2454954 exists in OpenPrinting CUPS versions 2.4.16 and earlier.

5

What is the affected component in REDHAT-BUG-2454954?

The affected component in REDHAT-BUG-2454954 is the cupsd service of OpenPrinting CUPS when exposed to the network.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203