Patchwire CVEs, their patch status, and feeds to follow them

CVE-2004-1268

Fixed in a distro release EPSS <1%

lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.

Published 2004-12-22 · CVE record · OSV

Products: easy_software_products cups, redhat fedora_core

Distro releases

ReleasePackageFixed in
Debian 12cups1.1.22-2
Debian 13cups1.1.22-2
Debian 14cups1.1.22-2
Red Hat Enterprise Linux 3cups1:1.1.17-13.3.22
Red Hat Enterprise Linux 3cups-debuginfo1:1.1.17-13.3.22
Red Hat Enterprise Linux 3cups-devel1:1.1.17-13.3.22
Red Hat Enterprise Linux 3cups-libs1:1.1.17-13.3.22
Red Hat Enterprise Linux 4cups1:1.1.22-0.rc1.9.6
Red Hat Enterprise Linux 4cups-debuginfo1:1.1.22-0.rc1.9.6
Red Hat Enterprise Linux 4cups-devel1:1.1.22-0.rc1.9.6
Red Hat Enterprise Linux 4cups-libs1:1.1.22-0.rc1.9.6