{"schemaVersion":3,"id":"CVE-2021-25317","aliases":["SUSE-SU-2021:1453-1","SUSE-SU-2021:1454-1","SUSE-SU-2021:14712-1","openSUSE-SU-2021:0638-1"],"status":"published","duplicateOf":null,"title":null,"description":"A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.","dates":{"published":"2021-05-05T09:35:13.321Z","modified":"2026-10-08T21:03:33.534Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":3.3,"severity":"low","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":3.3,"severity":"low","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":3.3,"severity":"low","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":2.1,"severity":"low","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00268,"percentile":0.17791,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00268},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00268,"percentile":0.17791}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00268,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00268,"percentile":0.17791}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-276","name":"Incorrect Default Permissions","description":"During installation, installed file permissions are set to allow anyone to modify those files.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/276.html"}],"affected":[{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"32","noFixRecorded":false,"fixedIn":null},{"text":"33","noFixRecorded":false,"fixedIn":null},{"text":"34","noFixRecorded":false,"fixedIn":null}],"versionsText":"32 | 33 | 34","eol":{"isEol":true,"eolDate":"2021-05-25T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"32","label":"32","eolFrom":"2021-05-25T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"opensuse","product":"factory","name":"factory","label":"factory","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ cups, ≤ 2.3.3op2-2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ cups, ≤ 2.3.3op2-2.1","eol":null,"hubHref":"/vendor/opensuse/factory"},{"vendor":"opensuse","product":"opensuse leap 15.2","name":"openSUSE Leap 15.2","label":"opensuse leap 15.2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ cups, < 2.2.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ cups, < 2.2.7","eol":null,"hubHref":"/vendor/opensuse/opensuse_leap_152"},{"vendor":"opensuse","product":"cups&distro=openSUSE Leap 15.2","name":"cups","label":"cups&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cups&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.2.7-lp152.9.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-lp152.9.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=HPE Helion OpenStack 8","name":"cups","label":"cups&distro=HPE Helion OpenStack 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=HPE Helion OpenStack 8","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Enterprise Storage 6","name":"cups","label":"cups&distro=SUSE Enterprise Storage 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Enterprise Storage 6","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","name":"cups","label":"cups&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","name":"cups","label":"cups&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","name":"cups","label":"cups&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","name":"cups","label":"cups&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2","name":"cups","label":"cups&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Module for Development Tools 15 SP2","name":"cups","label":"cups&distro=SUSE Linux Enterprise Module for Development Tools 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Module for Development Tools 15 SP2","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Point of Sale 11 SP3","name":"cups","label":"cups&distro=SUSE Linux Enterprise Point of Sale 11 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Point of Sale 11 SP3","purlType":"rpm","versions":[{"text":"< 1.3.9-8.46.56.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.9-8.46.56.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 1.3.9-8.46.56.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.9-8.46.56.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server 12 SP2-BCL","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server 12 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server 12 SP2-BCL","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server 12 SP3-BCL","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server 12 SP3-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server 12 SP3-BCL","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server 12 SP5","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server 12 SP5","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server 15 SP1-BCL","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server 15 SP1-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server 15 SP1-BCL","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server 15-LTSS","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server 15-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server 15-LTSS","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server for SAP Applications 15","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server for SAP Applications 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server for SAP Applications 15","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","name":"cups","label":"cups&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","name":"cups","label":"cups&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Manager Proxy 4.0","name":"cups","label":"cups&distro=SUSE Manager Proxy 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Manager Proxy 4.0","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Manager Retail Branch Server 4.0","name":"cups","label":"cups&distro=SUSE Manager Retail Branch Server 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Manager Retail Branch Server 4.0","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE Manager Server 4.0","name":"cups","label":"cups&distro=SUSE Manager Server 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE Manager Server 4.0","purlType":"rpm","versions":[{"text":"< 2.2.7-3.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.7-3.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE OpenStack Cloud 8","name":"cups","label":"cups&distro=SUSE OpenStack Cloud 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE OpenStack Cloud 8","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE OpenStack Cloud 9","name":"cups","label":"cups&distro=SUSE OpenStack Cloud 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE OpenStack Cloud 9","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE OpenStack Cloud Crowbar 8","name":"cups","label":"cups&distro=SUSE OpenStack Cloud Crowbar 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE OpenStack Cloud Crowbar 8","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups&distro=SUSE OpenStack Cloud Crowbar 9","name":"cups","label":"cups&distro=SUSE OpenStack Cloud Crowbar 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups&distro=SUSE OpenStack Cloud Crowbar 9","purlType":"rpm","versions":[{"text":"< 1.7.5-20.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.5-20.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups","name":"cups","label":"cups","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.3.9","noFixRecorded":false,"fixedIn":null},{"text":"< 2.2.7","noFixRecorded":false,"fixedIn":null},{"text":"< 1.7.5","noFixRecorded":false,"fixedIn":null},{"text":"≤ 2.3.3op2-2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.9 | < 2.2.7 | < 1.7.5 | ≤ 2.3.3op2-2.1","eol":null,"hubHref":"/vendor/suse/cups"},{"vendor":"suse","product":"suse linux enterprise server 11-sp4-ltss","name":"SUSE Linux Enterprise Server 11-SP4-LTSS","label":"suse linux enterprise server 11-sp4-ltss","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ cups, < 1.3.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ cups, < 1.3.9","eol":null,"hubHref":"/vendor/suse/suse_linux_enterprise_server_11-sp4-ltss"},{"vendor":"suse","product":"suse manager server 4.0","name":"SUSE Manager Server 4.0","label":"suse manager server 4.0","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ cups, < 2.2.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ cups, < 2.2.7","eol":null,"hubHref":"/vendor/suse/suse_manager_server_40"},{"vendor":"suse","product":"suse openstack cloud crowbar 9","name":"SUSE OpenStack Cloud Crowbar 9","label":"suse openstack cloud crowbar 9","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ cups, < 1.7.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ cups, < 1.7.5","eol":null,"hubHref":"/vendor/suse/suse_openstack_cloud_crowbar_9"}],"affectedCount":39,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1184161","label":"bugzilla.suse.com/show_bug.cgi?id=1184161","hostname":"bugzilla.suse.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H74BP746O5NNVCBUTLLZYAFBPESFVECV/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S37IDQGHTORQ3Z6VRDQIGBYVOI27YG47/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWPGZLT3U776Q5YPPSA6LGFWWBDWBVH3/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211453-1/","label":"www.suse.com/support/update/announcement/2021/suse-su-20211453-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1184161","label":"bugzilla.suse.com/1184161","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25317","label":"www.suse.com/security/cve/CVE-2021-25317","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211454-1/","label":"www.suse.com/support/update/announcement/2021/suse-su-20211454-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114712-1/","label":"www.suse.com/support/update/announcement/2021/suse-su-202114712-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7GKB5OH3W4MLNXHW3ZQK7GEVLAEMXZ7C/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10707-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10707-1"]},"timeline":[{"kind":"published","date":"2021-05-05T09:35:13.321Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-08T21:03:33.534Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":13,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:45:31.724Z","stale":false,"partial":false}}