PT-2025-48289 · Openprinting+5 · Cups+5

Published 2025-11-18 · Updated 2026-04-22 · CVE-2025-58436

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.15

Description OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. A client sending slow messages to cupsd, such as one byte per second, can cause delays that make the system unusable for other clients, potentially leading to a denial-of-service (DoS) attack.

Recommendations Update to version 2.4.15 or later.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2026:0312

ALSA-2026:0464

ALSA-2026:0596

AZL-71143

AZL-71149

BDU:2026-02912

CVE-2025-58436

ECHO-DE5E-C179-1338

GHSA-8WPW-VFGM-QRRR

MGASA-2025-0315

OPENSUSE-SU-2026:10088-1

OPENSUSE-SU-2026:20172-1

RHSA-2026:0312

RHSA-2026:0464

RHSA-2026:0596

RHSA-2026:8814

SUSE-SU-2025:4290-1

SUSE-SU-2025:4319-1

SUSE-SU-2025:4425-1

SUSE-SU-2025_4290-1

SUSE-SU-2025_4319-1

SUSE-SU-2026:20229-1

SUSE-SU-2026:20231-1

SUSE-SU-2026:20528-1

SUSE-SU-2026:20535-1

USN-7912-1

USN-7912-2

Affected Products

Cups

Debian

Linuxmint

Rocky Linux

Suse

Ubuntu

References · 90

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58436.json · Exploit
• 🔥 https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr · Exploit
• https://github.com/OpenPrinting/cups/commit/40008d76a001babbb9beb9d9d74b01a86fb6ddb4 · Patch
• https://osv.dev/vulnerability/CVE-2025-58436 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:0596 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-58436 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20172-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7912-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0315.html · Security Note
• https://errata.rockylinux.org/RLSA-2026:0312 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-0312.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:0596 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20535-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7912-2 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:0464 · Vendor Advisory