CVE-2026-107890

Katalog CVE

CVSS 3.3 · Low EPSS 0,10%

Kerentanan NULL Pointer Dereference. Skor CVSS 3.1 3.3 (Low) menurut mitre.org.

Deskripsi (NVD)

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPP_TAG_ZERO, but add_job() converts these separators to IPP_TAG_JOB. During job startup, get_options()/ipp_length() subsequently calls strlen() on a NULL attribute name, terminating cupsd and disrupting all queues. A single crafted Print-Job request can trigger the crash when the client can reach the scheduler and submit jobs to an accepting, enabled queue supporting the submitted document format. Anonymous submission is possible when permitted by listener and access-control configuration.

Rincian

Terbit di NVD

9 Oktober 2026

Terakhir diubah

13 Oktober 2026

Status NVD

Awaiting Analysis

CVSS 3.1

3.3 (Low), sumber mitre.org
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,10% peluang dieksploitasi; lebih tinggi dari 0,6% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/OpenPrinting/cups/security/advisories/GHSA-wjc4-qhjr-5m5x