CVE-2021-25317Low· 3.3▾ SunlitA Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.
cups < 1.3.9fedora = 32fedora = 33fedora = 34cups < 2.2.7cups < 1.7.5cups <= 2.3.3op2-2.1Upgrade past the affected range:
cups 2.2.7Connected by shared product, vendor, weakness, or advisory.
CVE-2026-61702Medium· 5.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems
CVE-2026-55480Medium· 5.7OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems
CVE-2026-107888Medium· 5.1OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted
CVE-2026-55467Low· 2.5OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems
CVE-2026-55453Low· 3.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems
CVE-2021-29428High· 8.8In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it