PT-2025-37253 · Cups+9 · Cups+9

Silverplate3 · Published 2025-08-29 · Updated 2026-05-13 · CVE-2025-58364

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: CUPS versions 2.4.12 and earlier

Description: CUPS (Common Unix Printing System) is an open-source printing system for Linux and Unix-like operating systems. Versions 2.4.12 and earlier are susceptible to a remote denial of service due to unsafe deserialization.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

RCE

Weakness Enumeration

CWE-476

CWE-20

Related Identifiers

ALSA-2025:15700

ALSA-2025:15701

ALSA-2025:22063

ALT-PU-2025-11731

ALT-PU-2025-12797

AZL-67133

AZL-67136

BDU:2025-12439

CESA-2025_22063

CVE-2025-58364

DLA-4298-1

DSA-5998-1

GHSA-7QX3-R744-6QV4

INFSA-2025_15700

INFSA-2025_22063

MGASA-2026-0001

OESA-2025-2334

OPENSUSE-SU-2025:15562-1

OPENSUSE-SU-2026:20172-1

RHSA-2025:15700

RHSA-2025:15701

RHSA-2025:22063

RHSA-2025_15700

RHSA-2025_22063

RHSA-2026:8814

SUSE-SU-2025:03178-1

SUSE-SU-2025:03261-1

SUSE-SU-2025_03178-1

SUSE-SU-2025_03261-1

SUSE-SU-2026:20229-1

SUSE-SU-2026:20231-1

SUSE-SU-2026:20528-1

SUSE-SU-2026:20535-1

USN-7745-1

Affected Products

Alt Linux

Almalinux

Cups

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 100

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58364.json · Exploit
• https://github.com/OpenPrinting/cups/commit/e58cba9d6fceed4242980e51dbd1302cf638ab1d · Patch
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-1202SE17 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03178-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2334 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20229-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03261-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4298-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-58364 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20231-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1216SE321 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-22063.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2025:22063 · Vendor Advisory