Fluid Attacks Database

Description

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
alpine v3.20	cups	>=0 <2.4.16-r0	2.4.16-r0
rpm rhel7	cups	-	-
debian 12	cups	=2.4.10-1 \|\| =2.4.10-2 \|\| =2.4.10-3 \|\| =2.4.10-4 \|\| =2.4.14-1 \|\| =2.4.15-1 \|\| =2.4.16-1 \|\| =2.4.17-1 \|\| =2.4.18-1 \|\| =2.4.2-3 \|\| =2.4.2-3+deb12u1 \|\| =2.4.2-3+deb12u2 \|\| =2.4.2-3+deb12u3 \|\| =2.4.2-3+deb12u4 \|\| =2.4.2-3+deb12u5 \|\| =2.4.2-3+deb12u6 \|\| =2.4.2-3+deb12u7 \|\| =2.4.2-3+deb12u8 \|\| =2.4.2-3+deb12u9 \|\| =2.4.2-4 \|\| =2.4.2-5 \|\| =2.4.2-6 \|\| =2.4.7-1 \|\| =2.4.7-1.1 \|\| =2.4.7-1.2 \|\| =2.4.7-2 \|\| =2.4.7-3	-
debian 13	cups	=2.4.10-3 \|\| =2.4.10-3+deb13u1 \|\| =2.4.10-3+deb13u2 \|\| =2.4.10-4 \|\| =2.4.14-1 \|\| =2.4.15-1 \|\| =2.4.16-1 \|\| =2.4.17-1 \|\| =2.4.18-1	-
debian 14	cups	=2.4.10-3 \|\| =2.4.10-4 \|\| =2.4.14-1 \|\| >=0 <2.4.15-1	2.4.15-1
alpine v3.21	cups	>=0 <2.4.16-r0	2.4.16-r0
alpine v3.22	cups	>=0 <2.4.16-r0	2.4.16-r0
alpine v3.23	cups	>=0 <2.4.16-r0	2.4.16-r0
rpm rhel8	cups	<1:2.2.6-66.el8_10	1:2.2.6-66.el8_10
rpm rhel10	cups	<1:2.4.10-12.el10_1.2	1:2.4.10-12.el10_1.2

1-10 of 13

Aliases

1. CVE-2025-584362. NVD-2025-584363. OSV-ALPINE-2025-584364. OSV-2025-584365. OSV-DEBIAN-2025-584366. SECURITY-CVE-2025-584367. SECURITY-TRACKER-CVE-2025-58436

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.