{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "CUPS 1.x.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans la commande pdftops, caus\u00e9es par\nl\u0027usage de code source vuln\u00e9rable issu de Xpdf, peuvent \u00eatre exploit\u00e9es\nafin de provoquer un d\u00e9ni de service ou d\u0027ex\u00e9cuter du code arbitraire \u00e0\ndistance.\n\nUne vuln\u00e9rabilit\u00e9 de type d\u00e9bordement d\u0027entier durant le traitement d\u0027un\nfichier au format TIFF peut \u00eatre exploit\u00e9e au moyen d\u0027un fichier\nsp\u00e9cialement construit afin d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n\nUne erreur dans le traitement des en-t\u00eates Host: permet \u00e0 une personne\nmalveillante de porter atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es telles\nque l\u0027historique des travaux d\u0027impression.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2009-0147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0147"
    },
    {
      "name": "CVE-2009-0799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0799"
    },
    {
      "name": "CVE-2009-0166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0166"
    },
    {
      "name": "CVE-2009-1182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1182"
    },
    {
      "name": "CVE-2009-0195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0195"
    },
    {
      "name": "CVE-2009-1180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1180"
    },
    {
      "name": "CVE-2009-1183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1183"
    },
    {
      "name": "CVE-2009-0800",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0800"
    },
    {
      "name": "CVE-2009-0146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0146"
    },
    {
      "name": "CVE-2009-1179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1179"
    },
    {
      "name": "CVE-2009-0163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0163"
    },
    {
      "name": "CVE-2009-1181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1181"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2009:0429-1 du 16 avril    2009 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2009-0429.html"
    },
    {
      "title": "Notes de s\u00e9curit\u00e9 CUPS STR #3031 et #3118 du 16 avril 2009    :",
      "url": "http://cups.org/str.php?L3118"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2009:0458-1 du 30 avril    2009 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
    },
    {
      "title": "Notes de s\u00e9curit\u00e9 CUPS STR #3031 et #3118 du 16 avril 2009    :",
      "url": "http://cups.org/str.php?L3031"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-1773 du 17 avril 2009 :",
      "url": "http://www.debian.org/security/2009/dsa-1773"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA-200904-20 du 23 avril 2009    :",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200904-20.xml"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-759-1 et USN-760-1 du 16    avril 2009 :",
      "url": "http://www.ubuntu.com/usn/usn-759-1"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-1790 du 05 mai 2009 :",
      "url": "http://www.debian.org/security/2009/dsa-1790"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2009:0430-1 du 16 avril    2009 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2009-0430.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2009:0431-1 du 16 avril    2009 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2009-0431.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-759-1 et USN-760-1 du 16    avril 2009 :",
      "url": "http://www.ubuntu.com/usn/usn-760-1"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 SuSE SUSE-SA:2009:024 du 22 avril 2009    :",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-1793 du 06 mai 2009 :",
      "url": "http://www.debian.org/security/2009/dsa-1793"
    }
  ],
  "reference": "CERTA-2009-AVI-156",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2009-04-21T00:00:00.000000"
    },
    {
      "description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Gentoo, Debian, RedHat et SuSE.",
      "revision_date": "2009-05-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s d\u00e9couvertes dans CUPS permettent \u00e0 un\nutilisateur distant malveillant d\u0027ex\u00e9cuter du code arbitraire ou de\nporter atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans cups",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Note de changements CUPS du 16 avril 2009",
      "url": "http://cups.org/articles.php?L582"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "CUPS 1.x.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans la commande pdftops, caus\u00e9es par\nl\u0027usage de code source vuln\u00e9rable issu de Xpdf, peuvent \u00eatre exploit\u00e9es\nafin de provoquer un d\u00e9ni de service ou d\u0027ex\u00e9cuter du code arbitraire \u00e0\ndistance.\n\nUne vuln\u00e9rabilit\u00e9 de type d\u00e9bordement d\u0027entier durant le traitement d\u0027un\nfichier au format TIFF peut \u00eatre exploit\u00e9e au moyen d\u0027un fichier\nsp\u00e9cialement construit afin d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n\nUne erreur dans le traitement des en-t\u00eates Host: permet \u00e0 une personne\nmalveillante de porter atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es telles\nque l\u0027historique des travaux d\u0027impression.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2009-0147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0147"
    },
    {
      "name": "CVE-2009-0799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0799"
    },
    {
      "name": "CVE-2009-0166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0166"
    },
    {
      "name": "CVE-2009-1182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1182"
    },
    {
      "name": "CVE-2009-0195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0195"
    },
    {
      "name": "CVE-2009-1180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1180"
    },
    {
      "name": "CVE-2009-1183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1183"
    },
    {
      "name": "CVE-2009-0800",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0800"
    },
    {
      "name": "CVE-2009-0146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0146"
    },
    {
      "name": "CVE-2009-1179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1179"
    },
    {
      "name": "CVE-2009-0163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0163"
    },
    {
      "name": "CVE-2009-1181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1181"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2009:0429-1 du 16 avril    2009 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2009-0429.html"
    },
    {
      "title": "Notes de s\u00e9curit\u00e9 CUPS STR #3031 et #3118 du 16 avril 2009    :",
      "url": "http://cups.org/str.php?L3118"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2009:0458-1 du 30 avril    2009 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2009-0458.html"
    },
    {
      "title": "Notes de s\u00e9curit\u00e9 CUPS STR #3031 et #3118 du 16 avril 2009    :",
      "url": "http://cups.org/str.php?L3031"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-1773 du 17 avril 2009 :",
      "url": "http://www.debian.org/security/2009/dsa-1773"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA-200904-20 du 23 avril 2009    :",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200904-20.xml"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-759-1 et USN-760-1 du 16    avril 2009 :",
      "url": "http://www.ubuntu.com/usn/usn-759-1"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-1790 du 05 mai 2009 :",
      "url": "http://www.debian.org/security/2009/dsa-1790"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2009:0430-1 du 16 avril    2009 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2009-0430.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2009:0431-1 du 16 avril    2009 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2009-0431.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-759-1 et USN-760-1 du 16    avril 2009 :",
      "url": "http://www.ubuntu.com/usn/usn-760-1"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 SuSE SUSE-SA:2009:024 du 22 avril 2009    :",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-1793 du 06 mai 2009 :",
      "url": "http://www.debian.org/security/2009/dsa-1793"
    }
  ],
  "reference": "CERTA-2009-AVI-156",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2009-04-21T00:00:00.000000"
    },
    {
      "description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Gentoo, Debian, RedHat et SuSE.",
      "revision_date": "2009-05-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s d\u00e9couvertes dans CUPS permettent \u00e0 un\nutilisateur distant malveillant d\u0027ex\u00e9cuter du code arbitraire ou de\nporter atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans cups",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Note de changements CUPS du 16 avril 2009",
      "url": "http://cups.org/articles.php?L582"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4E90153-8D18-4A50-9581-895C851F6489",
              "versionEndIncluding": "1.3.9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4D89E03-94D0-4F7F-9A54-3021E3E5A321",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "298D6BE7-7683-4225-8DD6-4C0FC5EB48BC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "230B77E7-B1AE-4470-859D-7B5F99749D74",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B6070FC-4566-4314-940E-0AAE34B56E28",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC691F07-8B38-4867-AB18-51F380CAEA46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E943EFBF-39A7-408F-8AC5-677E83DFDBB4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
              "matchCriteriaId": "5EA7725A-4398-4C76-BEBF-10E56C7F34F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "D7415295-0FBF-4946-8D99-8CB2EC391319",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7C702EE3-4B7C-42EA-92AA-8717807CF67C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
              "matchCriteriaId": "73F74581-D71C-4FEC-BA8C-85EF4C1991BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
              "matchCriteriaId": "7ABCFB52-33D3-428C-B1D5-DCE504170A37",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "45F03F2B-6AC3-4872-9032-293C2E9B837C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E02B6FB-C36D-45F3-95F3-566CA03B29A3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "96093309-A87D-48D0-84DA-446255ABF231",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF67F149-614B-4507-A15F-E557A1B73423",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
              "matchCriteriaId": "49862F77-B8DE-4AA7-AE17-B348B05AC00E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "78D7719F-03E0-4E66-A50A-F8E857A9B6AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3139FDA-9476-4414-B349-7119E63FD268",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "523FE78C-441F-4ACD-B9F2-3E5293E277AB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "F887B5B1-7528-4086-AE6C-134F54A93342",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8C5C552-6276-4791-80CD-6B3EB425EF04",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "8335D4E3-563D-4288-B708-A9635BCA595F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "5279D055-248A-4BD1-9FBB-0024BA16DF5B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "16519855-FCB9-44A8-9C7E-116192327BAB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "B1D9330B-C51A-4C7D-A322-85103C64D86C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "2DA0C19F-95EB-429C-AF06-A2C1D5643662",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
              "matchCriteriaId": "225CCE80-FF4B-4B39-B8BD-EB4710047524",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
              "matchCriteriaId": "07925DD8-50C0-4908-95D1-7342A4617BBC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "48A519DB-6C6D-4094-814D-33BD5EF389BC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "B6ED7566-5092-4B08-97A9-B2B53117A224",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "98DCAC0C-896F-4353-A665-5BCD0D8AEBA5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "E72614CD-8F70-4E07-AD83-8FDE8026CEC7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
              "matchCriteriaId": "48E62419-C165-4B42-8C23-E24821BD4BB4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
              "matchCriteriaId": "217D804B-CA56-49CE-B9EB-2A297EB1763C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
              "matchCriteriaId": "A41E8583-C837-4871-B4D2-FD41C78D538E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "D480C37B-0DA8-4096-80B0-5198FE589A4B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "74F5A83B-3C1A-49F3-A9D6-F7B9B897E447",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "241D4183-879D-4974-BACB-A6987EDA2E7D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "96592A93-4967-4B91-BCF7-558DC472E7BC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "8758715D-B973-4960-8B7D-6F9A11E73288",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "0370E9EB-B830-4362-B83C-912579695691",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "D644926A-C2A5-45FE-85A3-2782CE87ED86",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2:b1:*:*:*:*:*:*",
              "matchCriteriaId": "AFB34629-DB13-4164-8A18-BD818E50528B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2:b2:*:*:*:*:*:*",
              "matchCriteriaId": "2D432471-B5FD-4B1D-82DF-6F3152752071",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "960DE41E-63DB-45EB-9B19-6349BDA05086",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "A57D2299-3409-4907-9FC0-5C3C715CDB37",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "C7EB92FA-3669-4530-BE69-84CF01D98FF4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0696E675-0A13-45FC-8917-845E6FF7A311",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "78BAC98C-1FE6-42A3-8B62-E3C321914F6A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "BCC3EF2F-0140-4185-9FB3-2B595B61CDC1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "7C36785A-F735-45C0-986B-9624AD65F0C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "3C1D3916-607F-44E8-9D47-93C6C0789083",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "174613C3-A04B-4701-849B-BAA598BF4F72",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "81C1137C-BE3D-45F9-83C9-D212107F0E14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "3CBC1F81-E93A-42A7-8BC8-4B903688F2E0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FA876FF-C58A-45CF-A8E8-E2068DF79421",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "5FD78771-BD9A-4AC2-B664-B189DD288FB2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "50A16424-732F-4B76-A753-1642A97BC1EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "E189C976-2DD2-485C-828E-7FC3DC6A8F32",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "A86CA90F-A944-4F3E-B75F-8147125335D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.3:b1:*:*:*:*:*:*",
              "matchCriteriaId": "690C4DEC-1467-4D7D-8E73-6EE1758439D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.3:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "FB5CA96B-411E-47BE-81A1-1C2E240A25F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.3:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "AA5A29C9-1913-4B8F-B162-66E71BEABD1A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FAFABDC-E40F-4C53-AC66-94EFD077665D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F96C1B80-9E20-4832-8308-BF7911569EF6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F2D7DB3-F467-4BC0-83BB-4706D067A2C5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "46C394DC-65A7-4713-B823-6F5D329A0C5C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5E9F74F-3C7D-486A-8BA1-EE2A73160B39",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "69BD64BB-BDA7-4F82-8324-B7C7C941133C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow."
    },
    {
      "lang": "es",
      "value": "El desbordamiento de enteros en las rutinas de decodificaci\u00f3n de im\u00e1genes TIFF en CUPS versiones 1.3.9 y anteriores, permite a los atacantes remotos causar una denegaci\u00f3n de servicio (bloqueo del demonio) y posiblemente ejecutar c\u00f3digo arbitrario por medio de una imagen TIFF dise\u00f1ada, que no es manejado apropiadamente por la funci\u00f3n _cupsImageReadTIFF (1) en el filtro imagetops y (2) el filtro imagetoraster, lo que conduce a un desbordamiento de b\u00fafer en la regi\u00f3n heap de la memoria."
    }
  ],
  "id": "CVE-2009-0163",
  "lastModified": "2026-04-23T00:35:47.467",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2009-04-23T17:30:01.577",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34481"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34722"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34747"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34756"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34852"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.cups.org/articles.php?L582"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.cups.org/str.php?L3031"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2009/dsa-1773"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0428.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/34571"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1022070"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/usn-760-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490596"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11546"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34481"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34722"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34747"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34756"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34852"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.cups.org/articles.php?L582"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.cups.org/str.php?L3031"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2009/dsa-1773"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0428.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/34571"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1022070"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/usn-760-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490596"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11546"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-189"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2009-0163"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2009-04-23T17:30:00Z",
    "severity": "MODERATE"
  },
  "details": "Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.",
  "id": "GHSA-5x2p-gch7-phhj",
  "modified": "2022-05-02T03:13:18Z",
  "published": "2022-05-02T03:13:18Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0163"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490596"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11546"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/34481"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/34722"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/34747"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/34756"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/34852"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
    },
    {
      "type": "WEB",
      "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
    },
    {
      "type": "WEB",
      "url": "http://www.cups.org/articles.php?L582"
    },
    {
      "type": "WEB",
      "url": "http://www.cups.org/str.php?L3031"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2009/dsa-1773"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0428.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/34571"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1022070"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-760-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2009-0163",
    "description": "Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.",
    "id": "GSD-2009-0163",
    "references": [
      "https://www.suse.com/security/cve/CVE-2009-0163.html",
      "https://www.debian.org/security/2009/dsa-1773",
      "https://access.redhat.com/errata/RHSA-2009:0429",
      "https://access.redhat.com/errata/RHSA-2009:0428",
      "https://linux.oracle.com/cve/CVE-2009-0163.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2009-0163"
      ],
      "details": "Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.",
      "id": "GSD-2009-0163",
      "modified": "2023-12-13T01:19:44.133241Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2009-0163",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "GLSA-200904-20",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
          },
          {
            "name": "http://www.cups.org/articles.php?L582",
            "refsource": "CONFIRM",
            "url": "http://www.cups.org/articles.php?L582"
          },
          {
            "name": "USN-760-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/usn-760-1"
          },
          {
            "name": "34481",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/34481"
          },
          {
            "name": "RHSA-2009:0428",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0428.html"
          },
          {
            "name": "34571",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/34571"
          },
          {
            "name": "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
            "refsource": "CONFIRM",
            "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
          },
          {
            "name": "34747",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/34747"
          },
          {
            "name": "20090417 rPSA-2009-0061-1 cups",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
          },
          {
            "name": "SUSE-SA:2009:024",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
          },
          {
            "name": "oval:org.mitre.oval:def:11546",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11546"
          },
          {
            "name": "1022070",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1022070"
          },
          {
            "name": "34756",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/34756"
          },
          {
            "name": "34852",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/34852"
          },
          {
            "name": "http://www.cups.org/str.php?L3031",
            "refsource": "CONFIRM",
            "url": "http://www.cups.org/str.php?L3031"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=490596",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490596"
          },
          {
            "name": "34722",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/34722"
          },
          {
            "name": "DSA-1773",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2009/dsa-1773"
          },
          {
            "name": "RHSA-2009:0429",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2:b1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.3:b1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.3:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2:rc3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.3:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.3.9",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2:b2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-0163"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-189"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=490596",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=490596"
            },
            {
              "name": "http://www.cups.org/str.php?L3031",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.cups.org/str.php?L3031"
            },
            {
              "name": "http://www.cups.org/articles.php?L582",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.cups.org/articles.php?L582"
            },
            {
              "name": "34571",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/34571"
            },
            {
              "name": "34481",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/34481"
            },
            {
              "name": "SUSE-SA:2009:024",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html"
            },
            {
              "name": "1022070",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1022070"
            },
            {
              "name": "34722",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/34722"
            },
            {
              "name": "34852",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/34852"
            },
            {
              "name": "RHSA-2009:0428",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0428.html"
            },
            {
              "name": "USN-760-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/usn-760-1"
            },
            {
              "name": "RHSA-2009:0429",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0429.html"
            },
            {
              "name": "DSA-1773",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2009/dsa-1773"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0061"
            },
            {
              "name": "34756",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/34756"
            },
            {
              "name": "GLSA-200904-20",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200904-20.xml"
            },
            {
              "name": "34747",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/34747"
            },
            {
              "name": "oval:org.mitre.oval:def:11546",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11546"
            },
            {
              "name": "20090417 rPSA-2009-0061-1 cups",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/502750/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2018-10-11T21:00Z",
      "publishedDate": "2009-04-23T17:30Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "cups-2.1.3-2.3 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the cups-2.1.3-2.3 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10075",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10075-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2009-0163 page",
        "url": "https://www.suse.com/security/cve/CVE-2009-0163/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2009-2820 page",
        "url": "https://www.suse.com/security/cve/CVE-2009-2820/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2009-3553 page",
        "url": "https://www.suse.com/security/cve/CVE-2009-3553/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2010-0393 page",
        "url": "https://www.suse.com/security/cve/CVE-2010-0393/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2010-0540 page",
        "url": "https://www.suse.com/security/cve/CVE-2010-0540/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2010-0542 page",
        "url": "https://www.suse.com/security/cve/CVE-2010-0542/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2010-1748 page",
        "url": "https://www.suse.com/security/cve/CVE-2010-1748/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2010-2941 page",
        "url": "https://www.suse.com/security/cve/CVE-2010-2941/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2012-5519 page",
        "url": "https://www.suse.com/security/cve/CVE-2012-5519/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2012-6094 page",
        "url": "https://www.suse.com/security/cve/CVE-2012-6094/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-2856 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-2856/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3537 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3537/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-5029 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-5029/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-5030 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-5030/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-5031 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-5031/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-1158 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-1158/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-1159 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-1159/"
      }
    ],
    "title": "cups-2.1.3-2.3 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10075-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cups-2.1.3-2.3.aarch64",
                "product": {
                  "name": "cups-2.1.3-2.3.aarch64",
                  "product_id": "cups-2.1.3-2.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-client-2.1.3-2.3.aarch64",
                "product": {
                  "name": "cups-client-2.1.3-2.3.aarch64",
                  "product_id": "cups-client-2.1.3-2.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-ddk-2.1.3-2.3.aarch64",
                "product": {
                  "name": "cups-ddk-2.1.3-2.3.aarch64",
                  "product_id": "cups-ddk-2.1.3-2.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-devel-2.1.3-2.3.aarch64",
                "product": {
                  "name": "cups-devel-2.1.3-2.3.aarch64",
                  "product_id": "cups-devel-2.1.3-2.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-devel-32bit-2.1.3-2.3.aarch64",
                "product": {
                  "name": "cups-devel-32bit-2.1.3-2.3.aarch64",
                  "product_id": "cups-devel-32bit-2.1.3-2.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-libs-2.1.3-2.3.aarch64",
                "product": {
                  "name": "cups-libs-2.1.3-2.3.aarch64",
                  "product_id": "cups-libs-2.1.3-2.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-libs-32bit-2.1.3-2.3.aarch64",
                "product": {
                  "name": "cups-libs-32bit-2.1.3-2.3.aarch64",
                  "product_id": "cups-libs-32bit-2.1.3-2.3.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cups-2.1.3-2.3.ppc64le",
                "product": {
                  "name": "cups-2.1.3-2.3.ppc64le",
                  "product_id": "cups-2.1.3-2.3.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "cups-client-2.1.3-2.3.ppc64le",
                "product": {
                  "name": "cups-client-2.1.3-2.3.ppc64le",
                  "product_id": "cups-client-2.1.3-2.3.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "cups-ddk-2.1.3-2.3.ppc64le",
                "product": {
                  "name": "cups-ddk-2.1.3-2.3.ppc64le",
                  "product_id": "cups-ddk-2.1.3-2.3.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "cups-devel-2.1.3-2.3.ppc64le",
                "product": {
                  "name": "cups-devel-2.1.3-2.3.ppc64le",
                  "product_id": "cups-devel-2.1.3-2.3.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "cups-devel-32bit-2.1.3-2.3.ppc64le",
                "product": {
                  "name": "cups-devel-32bit-2.1.3-2.3.ppc64le",
                  "product_id": "cups-devel-32bit-2.1.3-2.3.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "cups-libs-2.1.3-2.3.ppc64le",
                "product": {
                  "name": "cups-libs-2.1.3-2.3.ppc64le",
                  "product_id": "cups-libs-2.1.3-2.3.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "cups-libs-32bit-2.1.3-2.3.ppc64le",
                "product": {
                  "name": "cups-libs-32bit-2.1.3-2.3.ppc64le",
                  "product_id": "cups-libs-32bit-2.1.3-2.3.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cups-2.1.3-2.3.s390x",
                "product": {
                  "name": "cups-2.1.3-2.3.s390x",
                  "product_id": "cups-2.1.3-2.3.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "cups-client-2.1.3-2.3.s390x",
                "product": {
                  "name": "cups-client-2.1.3-2.3.s390x",
                  "product_id": "cups-client-2.1.3-2.3.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "cups-ddk-2.1.3-2.3.s390x",
                "product": {
                  "name": "cups-ddk-2.1.3-2.3.s390x",
                  "product_id": "cups-ddk-2.1.3-2.3.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "cups-devel-2.1.3-2.3.s390x",
                "product": {
                  "name": "cups-devel-2.1.3-2.3.s390x",
                  "product_id": "cups-devel-2.1.3-2.3.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "cups-devel-32bit-2.1.3-2.3.s390x",
                "product": {
                  "name": "cups-devel-32bit-2.1.3-2.3.s390x",
                  "product_id": "cups-devel-32bit-2.1.3-2.3.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "cups-libs-2.1.3-2.3.s390x",
                "product": {
                  "name": "cups-libs-2.1.3-2.3.s390x",
                  "product_id": "cups-libs-2.1.3-2.3.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "cups-libs-32bit-2.1.3-2.3.s390x",
                "product": {
                  "name": "cups-libs-32bit-2.1.3-2.3.s390x",
                  "product_id": "cups-libs-32bit-2.1.3-2.3.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cups-2.1.3-2.3.x86_64",
                "product": {
                  "name": "cups-2.1.3-2.3.x86_64",
                  "product_id": "cups-2.1.3-2.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-client-2.1.3-2.3.x86_64",
                "product": {
                  "name": "cups-client-2.1.3-2.3.x86_64",
                  "product_id": "cups-client-2.1.3-2.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-ddk-2.1.3-2.3.x86_64",
                "product": {
                  "name": "cups-ddk-2.1.3-2.3.x86_64",
                  "product_id": "cups-ddk-2.1.3-2.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-devel-2.1.3-2.3.x86_64",
                "product": {
                  "name": "cups-devel-2.1.3-2.3.x86_64",
                  "product_id": "cups-devel-2.1.3-2.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-devel-32bit-2.1.3-2.3.x86_64",
                "product": {
                  "name": "cups-devel-32bit-2.1.3-2.3.x86_64",
                  "product_id": "cups-devel-32bit-2.1.3-2.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-libs-2.1.3-2.3.x86_64",
                "product": {
                  "name": "cups-libs-2.1.3-2.3.x86_64",
                  "product_id": "cups-libs-2.1.3-2.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-libs-32bit-2.1.3-2.3.x86_64",
                "product": {
                  "name": "cups-libs-32bit-2.1.3-2.3.x86_64",
                  "product_id": "cups-libs-32bit-2.1.3-2.3.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64"
        },
        "product_reference": "cups-2.1.3-2.3.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le"
        },
        "product_reference": "cups-2.1.3-2.3.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x"
        },
        "product_reference": "cups-2.1.3-2.3.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64"
        },
        "product_reference": "cups-2.1.3-2.3.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-client-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64"
        },
        "product_reference": "cups-client-2.1.3-2.3.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-client-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le"
        },
        "product_reference": "cups-client-2.1.3-2.3.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-client-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x"
        },
        "product_reference": "cups-client-2.1.3-2.3.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-client-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64"
        },
        "product_reference": "cups-client-2.1.3-2.3.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-ddk-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64"
        },
        "product_reference": "cups-ddk-2.1.3-2.3.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-ddk-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le"
        },
        "product_reference": "cups-ddk-2.1.3-2.3.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-ddk-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x"
        },
        "product_reference": "cups-ddk-2.1.3-2.3.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-ddk-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64"
        },
        "product_reference": "cups-ddk-2.1.3-2.3.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-devel-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64"
        },
        "product_reference": "cups-devel-2.1.3-2.3.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-devel-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le"
        },
        "product_reference": "cups-devel-2.1.3-2.3.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-devel-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x"
        },
        "product_reference": "cups-devel-2.1.3-2.3.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-devel-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64"
        },
        "product_reference": "cups-devel-2.1.3-2.3.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-devel-32bit-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64"
        },
        "product_reference": "cups-devel-32bit-2.1.3-2.3.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-devel-32bit-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le"
        },
        "product_reference": "cups-devel-32bit-2.1.3-2.3.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-devel-32bit-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x"
        },
        "product_reference": "cups-devel-32bit-2.1.3-2.3.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-devel-32bit-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64"
        },
        "product_reference": "cups-devel-32bit-2.1.3-2.3.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-libs-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64"
        },
        "product_reference": "cups-libs-2.1.3-2.3.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-libs-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le"
        },
        "product_reference": "cups-libs-2.1.3-2.3.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-libs-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x"
        },
        "product_reference": "cups-libs-2.1.3-2.3.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-libs-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64"
        },
        "product_reference": "cups-libs-2.1.3-2.3.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-libs-32bit-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64"
        },
        "product_reference": "cups-libs-32bit-2.1.3-2.3.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-libs-32bit-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le"
        },
        "product_reference": "cups-libs-32bit-2.1.3-2.3.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-libs-32bit-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x"
        },
        "product_reference": "cups-libs-32bit-2.1.3-2.3.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-libs-32bit-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        },
        "product_reference": "cups-libs-32bit-2.1.3-2.3.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2009-0163",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2009-0163"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2009-0163",
          "url": "https://www.suse.com/security/cve/CVE-2009-0163"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 485895 for CVE-2009-0163",
          "url": "https://bugzilla.suse.com/485895"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2009-0163"
    },
    {
      "cve": "CVE-2009-2820",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2009-2820"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product\u0027s web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2009-2820",
          "url": "https://www.suse.com/security/cve/CVE-2009-2820"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 548317 for CVE-2009-2820",
          "url": "https://bugzilla.suse.com/548317"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 551563 for CVE-2009-2820",
          "url": "https://bugzilla.suse.com/551563"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 574336 for CVE-2009-2820",
          "url": "https://bugzilla.suse.com/574336"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2009-2820"
    },
    {
      "cve": "CVE-2009-3553",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2009-3553"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2009-3553",
          "url": "https://www.suse.com/security/cve/CVE-2009-3553"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 554861 for CVE-2009-3553",
          "url": "https://bugzilla.suse.com/554861"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 574336 for CVE-2009-3553",
          "url": "https://bugzilla.suse.com/574336"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 578215 for CVE-2009-3553",
          "url": "https://bugzilla.suse.com/578215"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2009-3553"
    },
    {
      "cve": "CVE-2010-0393",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2010-0393"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with format string specifiers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2010-0393",
          "url": "https://www.suse.com/security/cve/CVE-2010-0393"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 574336 for CVE-2010-0393",
          "url": "https://bugzilla.suse.com/574336"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2010-0393"
    },
    {
      "cve": "CVE-2010-0540",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2010-0540"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2010-0540",
          "url": "https://www.suse.com/security/cve/CVE-2010-0540"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 601830 for CVE-2010-0540",
          "url": "https://bugzilla.suse.com/601830"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 671735 for CVE-2010-0540",
          "url": "https://bugzilla.suse.com/671735"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 680210 for CVE-2010-0540",
          "url": "https://bugzilla.suse.com/680210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 680212 for CVE-2010-0540",
          "url": "https://bugzilla.suse.com/680212"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 700987 for CVE-2010-0540",
          "url": "https://bugzilla.suse.com/700987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 711490 for CVE-2010-0540",
          "url": "https://bugzilla.suse.com/711490"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 715643 for CVE-2010-0540",
          "url": "https://bugzilla.suse.com/715643"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 748422 for CVE-2010-0540",
          "url": "https://bugzilla.suse.com/748422"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2010-0540"
    },
    {
      "cve": "CVE-2010-0542",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2010-0542"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2010-0542",
          "url": "https://www.suse.com/security/cve/CVE-2010-0542"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 601352 for CVE-2010-0542",
          "url": "https://bugzilla.suse.com/601352"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 644521 for CVE-2010-0542",
          "url": "https://bugzilla.suse.com/644521"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 657780 for CVE-2010-0542",
          "url": "https://bugzilla.suse.com/657780"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2010-0542"
    },
    {
      "cve": "CVE-2010-1748",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2010-1748"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect\u0026URL=% and (2) /admin?URL=/admin/\u0026OP=% URIs.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2010-1748",
          "url": "https://www.suse.com/security/cve/CVE-2010-1748"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 601352 for CVE-2010-1748",
          "url": "https://bugzilla.suse.com/601352"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 604271 for CVE-2010-1748",
          "url": "https://bugzilla.suse.com/604271"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 644521 for CVE-2010-1748",
          "url": "https://bugzilla.suse.com/644521"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 649256 for CVE-2010-1748",
          "url": "https://bugzilla.suse.com/649256"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 657780 for CVE-2010-1748",
          "url": "https://bugzilla.suse.com/657780"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2010-1748"
    },
    {
      "cve": "CVE-2010-2941",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2010-2941"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2010-2941",
          "url": "https://www.suse.com/security/cve/CVE-2010-2941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 649256 for CVE-2010-2941",
          "url": "https://bugzilla.suse.com/649256"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 654627 for CVE-2010-2941",
          "url": "https://bugzilla.suse.com/654627"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2010-2941"
    },
    {
      "cve": "CVE-2012-5519",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2012-5519"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2012-5519",
          "url": "https://www.suse.com/security/cve/CVE-2012-5519"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180148 for CVE-2012-5519",
          "url": "https://bugzilla.suse.com/1180148"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 789566 for CVE-2012-5519",
          "url": "https://bugzilla.suse.com/789566"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 882905 for CVE-2012-5519",
          "url": "https://bugzilla.suse.com/882905"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 924208 for CVE-2012-5519",
          "url": "https://bugzilla.suse.com/924208"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2012-5519"
    },
    {
      "cve": "CVE-2012-6094",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2012-6094"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "cups (Common Unix Printing System) \u0027Listen localhost:631\u0027 option not honored correctly which could provide unauthorized access to the system",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2012-6094",
          "url": "https://www.suse.com/security/cve/CVE-2012-6094"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 795624 for CVE-2012-6094",
          "url": "https://bugzilla.suse.com/795624"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 857372 for CVE-2012-6094",
          "url": "https://bugzilla.suse.com/857372"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2012-6094"
    },
    {
      "cve": "CVE-2014-2856",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-2856"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-2856",
          "url": "https://www.suse.com/security/cve/CVE-2014-2856"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 873899 for CVE-2014-2856",
          "url": "https://bugzilla.suse.com/873899"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-2856"
    },
    {
      "cve": "CVE-2014-3537",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3537"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3537",
          "url": "https://www.suse.com/security/cve/CVE-2014-3537"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 887240 for CVE-2014-3537",
          "url": "https://bugzilla.suse.com/887240"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3537"
    },
    {
      "cve": "CVE-2014-5029",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-5029"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-5029",
          "url": "https://www.suse.com/security/cve/CVE-2014-5029"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 887240 for CVE-2014-5029",
          "url": "https://bugzilla.suse.com/887240"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-5029"
    },
    {
      "cve": "CVE-2014-5030",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-5030"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-5030",
          "url": "https://www.suse.com/security/cve/CVE-2014-5030"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 887240 for CVE-2014-5030",
          "url": "https://bugzilla.suse.com/887240"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-5030"
    },
    {
      "cve": "CVE-2014-5031",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-5031"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-5031",
          "url": "https://www.suse.com/security/cve/CVE-2014-5031"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 887240 for CVE-2014-5031",
          "url": "https://bugzilla.suse.com/887240"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-5031"
    },
    {
      "cve": "CVE-2015-1158",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-1158"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-1158",
          "url": "https://www.suse.com/security/cve/CVE-2015-1158"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 924208 for CVE-2015-1158",
          "url": "https://bugzilla.suse.com/924208"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 976653 for CVE-2015-1158",
          "url": "https://bugzilla.suse.com/976653"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-1158"
    },
    {
      "cve": "CVE-2015-1159",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-1159"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
          "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-1159",
          "url": "https://www.suse.com/security/cve/CVE-2015-1159"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 924208 for CVE-2015-1159",
          "url": "https://bugzilla.suse.com/924208"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 976653 for CVE-2015-1159",
          "url": "https://bugzilla.suse.com/976653"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
            "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-1159"
    }
  ]
}