The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3029 advisory.

    Joshua Mason discovered that a logic error in the validation of the secret key used in the local     authorisation mode of the CUPS printing system may result in privilege escalation. For Debian 9 stretch,     this problem has been fixed in version 2.2.1-8+deb9u8. We recommend that you upgrade your cups packages.
    For the detailed security status of cups please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/cups Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5056 advisory.

    The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar     operating systems.

    Security Fix(es):

    * cups: authorization bypass when using local authorization (CVE-2022-26691)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * 30-second delays printing to Windows 2016 server via HTTPS (BZ#2073531)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A logic issue was addressed with improved state management. This issue is fixed in Security Update     2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated     privileges. (CVE-2022-26691)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the cups packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A logic issue was addressed with improved state management. This issue is fixed in Security Update     2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated     privileges. (CVE-2022-26691)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-108 advisory.

    An authorization vulnerability was found in the CUPS printing system. This security vulnerability occurs     when local authorization happens. This flaw allows an attacker to authenticate to CUPS as root/admin     without the 32-byte secret key and perform arbitrary code execution. (CVE-2022-26691)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-073 advisory.

    An authorization vulnerability was found in the CUPS printing system. This security vulnerability occurs     when local authorization happens. This flaw allows an attacker to authenticate to CUPS as root/admin     without the 32-byte secret key and perform arbitrary code execution. (CVE-2022-26691)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5149 advisory.

  - A logic issue was addressed with improved state management. This issue is fixed in Security Update     2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated     privileges. (CVE-2022-26691)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5055 advisory.

    The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar     operating systems.

    Security Fix(es):

    * cups: authorization bypass when using local authorization (CVE-2022-26691)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4990 advisory.

    [1:2.3.3op2-13.1]
    - CVE-2022-26691 cups: authorization bypass when using 'local' authorization

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5454-2 advisory.

    USN-5454-1 fixed several vulnerabilities in CUPS. This update provides the corresponding update for Ubuntu     16.04 ESM.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
161628	Debian DLA-3029-1 : cups - LTS security update	Nessus	Debian Local Security Checks	2022/5/27	2025/1/24	medium
162300	RHEL 8 : cups (RHSA-2022:5056)	Nessus	Red Hat Local Security Checks	2022/6/15	2024/11/7	medium
165395	EulerOS Virtualization 2.9.1 : cups (EulerOS-SA-2022-2340)	Nessus	Huawei Local Security Checks	2022/9/24	2022/9/24	medium
165968	EulerOS Virtualization 3.0.6.0 : cups (EulerOS-SA-2022-2550)	Nessus	Huawei Local Security Checks	2022/10/10	2022/10/10	medium
164774	Amazon Linux 2022 : cups, cups-client, cups-devel (ALAS2022-2022-108)	Nessus	Amazon Linux Local Security Checks	2022/9/7	2024/12/11	medium
173064	Amazon Linux 2023 : cups, cups-client, cups-devel (ALAS2023-2023-073)	Nessus	Amazon Linux Local Security Checks	2023/3/21	2024/12/11	medium
161636	Debian DSA-5149-1 : cups - security update	Nessus	Debian Local Security Checks	2022/5/27	2022/6/8	medium
162301	RHEL 8 : cups (RHSA-2022:5055)	Nessus	Red Hat Local Security Checks	2022/6/15	2024/11/7	medium
162806	Oracle Linux 9 : cups (ELSA-2022-4990)	Nessus	Oracle Linux Local Security Checks	2022/7/7	2024/11/1	medium
161728	Ubuntu 16.04 ESM : CUPS vulnerabilities (USN-5454-2)	Nessus	Ubuntu Local Security Checks	2022/6/1	2024/10/29	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium