BaseFortify

Publication date: 2025-11-29

Last updated on: 2025-12-04

Assigner: GitHub, Inc.

Description

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-29

Last Modified

2025-12-04

Generated

2026-07-06

AI Q&A

2025-11-29

EPSS Evaluated

2026-07-05

NVD

CVE-2025-58436

Affected Vendors & Products

Vendor	Product	Version / Range
openprinting	cups	to 2.4.15 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability in OpenPrinting CUPS occurs when a client connects to the cupsd service and sends data very slowly, for example, only one byte per second. This slow message sending causes the cupsd service to become delayed and unresponsive, making it unusable for other clients. The issue was fixed in version 2.4.15.

Impact Analysis

The vulnerability can cause denial of service by making the cupsd printing service unresponsive to other clients when a slow client connects and sends data slowly. This can disrupt printing operations and availability of the printing service.

Mitigation Strategies

Upgrade OpenPrinting CUPS to version 2.4.15 or later, as this version contains the patch that fixes the vulnerability causing cupsd to become unusable when receiving slow messages.

Hi! I’m here to help you understand CVE-2025-58436. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70