It was discovered that CUPS incorrectly handled input from users in the web configuration settings. An attacker could use this issue to insert malicious configuration options, causing a denial of service or possibly executing arbitrary code.
{
"binaries": [
{
"binary_name": "cups",
"binary_version": "2.4.1op1-1ubuntu4.15"
},
{
"binary_name": "cups-bsd",
"binary_version": "2.4.1op1-1ubuntu4.15"
},
{
"binary_name": "cups-client",
"binary_version": "2.4.1op1-1ubuntu4.15"
},
{
"binary_name": "cups-common",
"binary_version": "2.4.1op1-1ubuntu4.15"
},
{
"binary_name": "cups-core-drivers",
"binary_version": "2.4.1op1-1ubuntu4.15"
},
{
"binary_name": "cups-daemon",
"binary_version": "2.4.1op1-1ubuntu4.15"
},
{
"binary_name": "cups-ipp-utils",
"binary_version": "2.4.1op1-1ubuntu4.15"
},
{
"binary_name": "cups-ppdc",
"binary_version": "2.4.1op1-1ubuntu4.15"
},
{
"binary_name": "cups-server-common",
"binary_version": "2.4.1op1-1ubuntu4.15"
},
{
"binary_name": "libcups2",
"binary_version": "2.4.1op1-1ubuntu4.15"
},
{
"binary_name": "libcups2-dev",
"binary_version": "2.4.1op1-1ubuntu4.15"
},
{
"binary_name": "libcupsimage2",
"binary_version": "2.4.1op1-1ubuntu4.15"
},
{
"binary_name": "libcupsimage2-dev",
"binary_version": "2.4.1op1-1ubuntu4.15"
}
],
"availability": "No subscription required"
}"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7897-1.json"
{
"ecosystem": "Ubuntu:22.04:LTS",
"cves": [
{
"id": "CVE-2025-61915",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
{
"binaries": [
{
"binary_name": "cups",
"binary_version": "2.4.7-1.2ubuntu7.7"
},
{
"binary_name": "cups-bsd",
"binary_version": "2.4.7-1.2ubuntu7.7"
},
{
"binary_name": "cups-client",
"binary_version": "2.4.7-1.2ubuntu7.7"
},
{
"binary_name": "cups-common",
"binary_version": "2.4.7-1.2ubuntu7.7"
},
{
"binary_name": "cups-core-drivers",
"binary_version": "2.4.7-1.2ubuntu7.7"
},
{
"binary_name": "cups-daemon",
"binary_version": "2.4.7-1.2ubuntu7.7"
},
{
"binary_name": "cups-ipp-utils",
"binary_version": "2.4.7-1.2ubuntu7.7"
},
{
"binary_name": "cups-ppdc",
"binary_version": "2.4.7-1.2ubuntu7.7"
},
{
"binary_name": "cups-server-common",
"binary_version": "2.4.7-1.2ubuntu7.7"
},
{
"binary_name": "libcups2-dev",
"binary_version": "2.4.7-1.2ubuntu7.7"
},
{
"binary_name": "libcups2t64",
"binary_version": "2.4.7-1.2ubuntu7.7"
},
{
"binary_name": "libcupsimage2-dev",
"binary_version": "2.4.7-1.2ubuntu7.7"
},
{
"binary_name": "libcupsimage2t64",
"binary_version": "2.4.7-1.2ubuntu7.7"
}
],
"availability": "No subscription required"
}"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7897-1.json"
{
"ecosystem": "Ubuntu:24.04:LTS",
"cves": [
{
"id": "CVE-2025-61915",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
{
"binaries": [
{
"binary_name": "cups",
"binary_version": "2.4.12-0ubuntu1.4"
},
{
"binary_name": "cups-bsd",
"binary_version": "2.4.12-0ubuntu1.4"
},
{
"binary_name": "cups-client",
"binary_version": "2.4.12-0ubuntu1.4"
},
{
"binary_name": "cups-common",
"binary_version": "2.4.12-0ubuntu1.4"
},
{
"binary_name": "cups-core-drivers",
"binary_version": "2.4.12-0ubuntu1.4"
},
{
"binary_name": "cups-daemon",
"binary_version": "2.4.12-0ubuntu1.4"
},
{
"binary_name": "cups-ipp-utils",
"binary_version": "2.4.12-0ubuntu1.4"
},
{
"binary_name": "cups-ppdc",
"binary_version": "2.4.12-0ubuntu1.4"
},
{
"binary_name": "cups-server-common",
"binary_version": "2.4.12-0ubuntu1.4"
},
{
"binary_name": "libcups2-dev",
"binary_version": "2.4.12-0ubuntu1.4"
},
{
"binary_name": "libcups2t64",
"binary_version": "2.4.12-0ubuntu1.4"
},
{
"binary_name": "libcupsimage2-dev",
"binary_version": "2.4.12-0ubuntu1.4"
},
{
"binary_name": "libcupsimage2t64",
"binary_version": "2.4.12-0ubuntu1.4"
}
],
"availability": "No subscription required"
}"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7897-1.json"
{
"ecosystem": "Ubuntu:25.04",
"cves": [
{
"id": "CVE-2025-61915",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
{
"binaries": [
{
"binary_name": "cups",
"binary_version": "2.4.12-0ubuntu3.3"
},
{
"binary_name": "cups-bsd",
"binary_version": "2.4.12-0ubuntu3.3"
},
{
"binary_name": "cups-client",
"binary_version": "2.4.12-0ubuntu3.3"
},
{
"binary_name": "cups-common",
"binary_version": "2.4.12-0ubuntu3.3"
},
{
"binary_name": "cups-core-drivers",
"binary_version": "2.4.12-0ubuntu3.3"
},
{
"binary_name": "cups-daemon",
"binary_version": "2.4.12-0ubuntu3.3"
},
{
"binary_name": "cups-ipp-utils",
"binary_version": "2.4.12-0ubuntu3.3"
},
{
"binary_name": "cups-ppdc",
"binary_version": "2.4.12-0ubuntu3.3"
},
{
"binary_name": "cups-server-common",
"binary_version": "2.4.12-0ubuntu3.3"
},
{
"binary_name": "libcups2-dev",
"binary_version": "2.4.12-0ubuntu3.3"
},
{
"binary_name": "libcups2t64",
"binary_version": "2.4.12-0ubuntu3.3"
},
{
"binary_name": "libcupsimage2-dev",
"binary_version": "2.4.12-0ubuntu3.3"
},
{
"binary_name": "libcupsimage2t64",
"binary_version": "2.4.12-0ubuntu3.3"
}
],
"availability": "No subscription required"
}"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7897-1.json"
{
"ecosystem": "Ubuntu:25.10",
"cves": [
{
"id": "CVE-2025-61915",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
{
"binaries": [
{
"binary_name": "cups",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "cups-bsd",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "cups-client",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "cups-common",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "cups-core-drivers",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "cups-daemon",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "cups-ipp-utils",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "cups-ppdc",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "cups-server-common",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "libcups2",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "libcups2-dev",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "libcupscgi1",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "libcupscgi1-dev",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "libcupsimage2",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "libcupsimage2-dev",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "libcupsmime1",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "libcupsmime1-dev",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "libcupsppdc1",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
},
{
"binary_name": "libcupsppdc1-dev",
"binary_version": "2.1.3-4ubuntu0.11+esm11"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7897-1.json"
{
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"cves": [
{
"id": "CVE-2025-61915",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
{
"binaries": [
{
"binary_name": "cups",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "cups-bsd",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "cups-client",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "cups-common",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "cups-core-drivers",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "cups-daemon",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "cups-ipp-utils",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "cups-ppdc",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "cups-server-common",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "libcups2",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "libcups2-dev",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "libcupscgi1",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "libcupsimage2",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "libcupsimage2-dev",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "libcupsmime1",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
},
{
"binary_name": "libcupsppdc1",
"binary_version": "2.2.7-1ubuntu2.10+esm9"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7897-1.json"
{
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"cves": [
{
"id": "CVE-2025-61915",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
{
"binaries": [
{
"binary_name": "cups",
"binary_version": "2.3.1-9ubuntu1.9+esm3"
},
{
"binary_name": "cups-bsd",
"binary_version": "2.3.1-9ubuntu1.9+esm3"
},
{
"binary_name": "cups-client",
"binary_version": "2.3.1-9ubuntu1.9+esm3"
},
{
"binary_name": "cups-common",
"binary_version": "2.3.1-9ubuntu1.9+esm3"
},
{
"binary_name": "cups-core-drivers",
"binary_version": "2.3.1-9ubuntu1.9+esm3"
},
{
"binary_name": "cups-daemon",
"binary_version": "2.3.1-9ubuntu1.9+esm3"
},
{
"binary_name": "cups-ipp-utils",
"binary_version": "2.3.1-9ubuntu1.9+esm3"
},
{
"binary_name": "cups-ppdc",
"binary_version": "2.3.1-9ubuntu1.9+esm3"
},
{
"binary_name": "cups-server-common",
"binary_version": "2.3.1-9ubuntu1.9+esm3"
},
{
"binary_name": "libcups2",
"binary_version": "2.3.1-9ubuntu1.9+esm3"
},
{
"binary_name": "libcups2-dev",
"binary_version": "2.3.1-9ubuntu1.9+esm3"
},
{
"binary_name": "libcupsimage2",
"binary_version": "2.3.1-9ubuntu1.9+esm3"
},
{
"binary_name": "libcupsimage2-dev",
"binary_version": "2.3.1-9ubuntu1.9+esm3"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7897-1.json"
{
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"cves": [
{
"id": "CVE-2025-61915",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}