cups (SUSE:Linux Enterprise Server for SAP Applications 12 SP3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server for SAP Applications 12 SP3 package cups, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (11)

• CVE-2019-8675 — CVSS 8.8 (high): A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004…
• CVE-2019-8696 — CVSS 8.8 (high): A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004…
• CVE-2018-4182 — CVSS 8.2 (high): In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS.
• CVE-2018-4183 — CVSS 8.2 (high): In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions.
• CVE-2020-3898 — CVSS 7.8 (high): A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able…
• CVE-2018-4180 — CVSS 7.8 (high): In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions.
• CVE-2017-18190 — CVSS 7.5 (high): A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute…
• CVE-2018-4181 — CVSS 5.5 (medium): In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions.
• CVE-2017-18248 — CVSS 5.3 (medium): The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending…
• CVE-2021-25317 — CVSS 3.3 (low): A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server…
• CVE-2018-4700: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300…