CVE-2021-25317
Fixed in a distro release EPSS <1%CVSS 3.3
A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.
Products: SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9, openSUSE Leap 15.2, openSUSE Factory
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | cups | 1:1.6.3-51.amzn2.0.5 |
| Amazon Linux 2 | cups-client | 1:1.6.3-51.amzn2.0.5 |
| Amazon Linux 2 | cups-devel | 1:1.6.3-51.amzn2.0.5 |
| Amazon Linux 2 | cups-filesystem | 1:1.6.3-51.amzn2.0.5 |
| Amazon Linux 2 | cups-ipptool | 1:1.6.3-51.amzn2.0.5 |
| Amazon Linux 2 | cups-libs | 1:1.6.3-51.amzn2.0.5 |
| Amazon Linux 2 | cups-lpd | 1:1.6.3-51.amzn2.0.5 |
| SUSE Enterprise Storage 6 | cups | 2.2.7-3.26.1 |
| SUSE HPE Helion OpenStack 8 | cups | 1.7.5-20.36.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | cups | 2.2.7-3.26.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | cups | 2.2.7-3.26.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | cups | 2.2.7-3.26.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | cups | 2.2.7-3.26.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | cups | 2.2.7-3.26.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | cups | 2.2.7-3.26.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | cups | 1.3.9-8.46.56.18.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | cups | 1.3.9-8.46.56.18.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | cups | 1.7.5-20.36.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | cups | 1.7.5-20.36.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | cups | 1.7.5-20.36.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | cups | 1.7.5-20.36.1 |
| SUSE Linux Enterprise Server 12 SP5 | cups | 1.7.5-20.36.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | cups | 2.2.7-3.26.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | cups | 2.2.7-3.26.1 |
| SUSE Linux Enterprise Server 15-LTSS | cups | 2.2.7-3.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | cups | 1.7.5-20.36.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | cups | 1.7.5-20.36.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | cups | 1.7.5-20.36.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | cups | 2.2.7-3.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | cups | 2.2.7-3.26.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | cups | 1.7.5-20.36.1 |
| SUSE Manager Proxy 4.0 | cups | 2.2.7-3.26.1 |
| SUSE Manager Retail Branch Server 4.0 | cups | 2.2.7-3.26.1 |
| SUSE Manager Server 4.0 | cups | 2.2.7-3.26.1 |
| SUSE OpenStack Cloud 8 | cups | 1.7.5-20.36.1 |
| SUSE OpenStack Cloud 9 | cups | 1.7.5-20.36.1 |
| SUSE OpenStack Cloud Crowbar 8 | cups | 1.7.5-20.36.1 |
| SUSE OpenStack Cloud Crowbar 9 | cups | 1.7.5-20.36.1 |
| openSUSE Leap 15.2 | cups | 2.2.7-lp152.9.9.1 |
| openSUSE Tumbleweed | cups | 2.3.3op2-4.2 |