According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In     versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a     symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument,     providing world-writable access to the target. Given that cupsd is often running as root, this can result     in the change of permission of any user or system files to be world writable. Given the aforementioned     Ubuntu AppArmor context, on such systems this vulnerability is limited to those files modifiable by the     cupsd process. In that specific case it was found to be possible to turn the configuration of the Listen     argument into full control over the cupsd.conf and cups-files.conf configuration files. By later setting     the User and Group arguments in cups-files.conf, and printing with a printer configured by PPD with a     `FoomaticRIPCommandLine` argument, arbitrary user and group (not root) command execution could be     achieved, which can further be used on Ubuntu systems to achieve full root command execution. Commit     ff1f8a623e090dee8a8aadf12a6a4b25efac143d contains a patch for the issue.(CVE-2024-35235)

Tenable has extracted the preceding description block directly from the EulerOS cups security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8601:06 advisory.

    * cups: Cupsd Listen arbitrary chmod 0140777 (CVE-2024-35235)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7c36291390 advisory.

    Rebase to 2.4.10, security fix for CVE-2024-35235

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2003-1 advisory.

    - CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other     files in the system. (bsc#1225365)
    - Handle local 'Negotiate' authentication response for cli clients (bsc#1223179)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the cups package has been released.

The version of cups installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35235 advisory.

  - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In     versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a     symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument,     providing world-writable access to the target. Given that cupsd is often running as root, this can result     in the change of permission of any user or system files to be world writable. Given the aforementioned     Ubuntu AppArmor context, on such systems this vulnerability is limited to those files modifiable by the     cupsd process. In that specific case it was found to be possible to turn the configuration of the Listen     argument into full control over the cupsd.conf and cups-files.conf configuration files. By later setting     the User and Group arguments in cups-files.conf, and printing with a printer configured by PPD with a     `FoomaticRIPCommandLine` argument, arbitrary user and group (not root) command execution could be     achieved, which can further be used on Ubuntu systems to achieve full root command execution. Commit     ff1f8a623e090dee8a8aadf12a6a4b25efac143d contains a patch for the issue. (CVE-2024-35235)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8519:05 advisory.

    * cups: Cupsd Listen arbitrary chmod 0140777 (CVE-2024-35235)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1734531954 advisory.

  - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In     versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a     symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument,     providing world-writable access to the target. Given that cupsd is often running as root, this can result     in the change of permission of any user or system files to be world writable. Given the aforementioned     Ubuntu AppArmor context, on such systems this vulnerability is limited to those files modifiable by the     cupsd process. In that specific case it was found to be possible to turn the configuration of the Listen     argument into full control over the cupsd.conf and cups-files.conf configuration files. By later setting     the User and Group arguments in cups-files.conf, and printing with a printer configured by PPD with a     `FoomaticRIPCommandLine` argument, arbitrary user and group (not root) command execution could be     achieved, which can further be used on Ubuntu systems to achieve full root command execution. Commit     ff1f8a623e090dee8a8aadf12a6a4b25efac143d contains a patch for the issue. (CVE-2024-35235)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2024_4265 advisory.

    * cups: Cupsd Listen arbitrary chmod 0140777 (CVE-2024-35235)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
207112	EulerOS 2.0 SP10 : cups (EulerOS-SA-2024-2409)	Nessus	Huawei Local Security Checks	2024/9/12	2025/9/29	medium
208346	EulerOS 2.0 SP12 : cups (EulerOS-SA-2024-2523)	Nessus	Huawei Local Security Checks	2024/10/9	2025/9/29	medium
293433	MiracleLinux 9 : cups-2.3.3op2-27.el9_4 (AXSA:2024-8601:06)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
202326	Fedora 39 : cups (2024-7c36291390)	Nessus	Fedora Local Security Checks	2024/7/13	2025/9/29	medium
200460	SUSE SLED15: cups / cups-client / cups-config / cups-ddk / cups-devel / etc (SUSE-SU-2024:2003-1)	Nessus	SuSE Local Security Checks	2024/6/13	2026/6/26	medium
204194	Photon OS 4.0: Cups PHSA-2024-4.0-0629	Nessus	PhotonOS Local Security Checks	2024/7/24	2025/9/29	medium
215421	Azure Linux 3.0 Security Update: cups (CVE-2024-35235)	Nessus	Azure Linux Local Security Checks	2025/2/10	2025/9/29	medium
292353	MiracleLinux 8 : cups-2.2.6-60.el8_10 (AXSA:2024-8519:05)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
361218	AlmaLinux 9.2 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (ALMALINUX9.2:CLSA-2024:1734531954)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	medium
355350	Rocky Linux 8 [CIQ] Security Update: cups / cups-client / cups-client-debuginfo / cups-debuginfo / etc (crlsa-2024_4265)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium