{"schemaVersion":3,"id":"USN-2341-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"cups vulnerabilities\n\nSalvatore Bonaccorso discovered that the CUPS web interface incorrectly\nvalidated permissions and incorrectly handled symlinks. An attacker could\npossibly use this issue to bypass file permissions and read arbitrary\nfiles, possibly leading to a privilege escalation.","dates":{"published":"2014-09-08T14:17:56.000Z","modified":"2026-04-22T08:59:40.187Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"cups","name":"cups","label":"cups","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/cups","purlType":"deb","versions":[{"text":"< 1.7.2-0ubuntu1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.2-0ubuntu1.2","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-2341-1","label":"ubuntu.com/security/notices/USN-2341-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-5029","label":"ubuntu.com/security/CVE-2014-5029","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2014-5030","label":"ubuntu.com/security/CVE-2014-5030","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2014-5031","label":"ubuntu.com/security/CVE-2014-5031","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2014-5029","CVE-2014-5030","CVE-2014-5031"],"downstream":[],"duplicates":[],"related":["CVE-2014-5029","CVE-2014-5030","CVE-2014-5031"]},"timeline":[{"kind":"published","date":"2014-09-08T14:17:56.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T08:59:40.187Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T08:20:58.377Z","stale":false,"partial":false}}