PT-2025-48290 · Cups+5 · Cups+5

Published 2025-11-27 · Updated 2026-04-22 · CVE-2025-61915

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions cups (affected versions not specified)

Description A local denial-of-service condition exists due to issues with updating the cupsd.conf file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Validation of Array Index

Weakness Enumeration

CWE-129

CWE-124

Related Identifiers

ALSA-2026:0312

ALSA-2026:0464

ALSA-2026:0596

AZL-71146

AZL-71152

BDU:2026-02916

CVE-2025-61915

ECHO-F011-54E9-0443

GHSA-HXM8-VFPQ-JRFC

MGASA-2025-0315

OPENSUSE-SU-2026:10088-1

OPENSUSE-SU-2026:20172-1

RHSA-2026:0312

RHSA-2026:0464

RHSA-2026:0596

SUSE-SU-2025:4289-1

SUSE-SU-2025:4290-1

SUSE-SU-2025_4289-1

SUSE-SU-2026:20229-1

SUSE-SU-2026:20231-1

SUSE-SU-2026:20528-1

SUSE-SU-2026:20535-1

USN-7897-1

Affected Products

Debian

Linuxmint

Rocky Linux

Suse

Ubuntu

Cups

References · 82

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61915.json · Exploit
• 🔥 https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc · Exploit
• https://github.com/OpenPrinting/cups/commit/db8d560262c22a21ee1e55dfd62fa98d9359bcb0 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4289-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02916 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-61915 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20172-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-61915 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-61915 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7897-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20535-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20229-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61915 · Security Note
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0305SE38 · Vendor Advisory