CVE-2025-58436
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-29

Last updated on: 2025-12-04

Assigner: GitHub, Inc.

Description
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-29
Last Modified
2025-12-04
Generated
2026-06-16
AI Q&A
2025-11-29
EPSS Evaluated
2026-06-15
NVD
CVE-2025-58436
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
openprinting cups to 2.4.15 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in OpenPrinting CUPS occurs when a client connects to the cupsd service and sends data very slowly, for example, only one byte per second. This slow message sending causes the cupsd service to become delayed and unresponsive, making it unusable for other clients. The issue was fixed in version 2.4.15.

Impact Analysis

The vulnerability can cause denial of service by making the cupsd printing service unresponsive to other clients when a slow client connects and sends data slowly. This can disrupt printing operations and availability of the printing service.

Mitigation Strategies

Upgrade OpenPrinting CUPS to version 2.4.15 or later, as this version contains the patch that fixes the vulnerability causing cupsd to become unusable when receiving slow messages.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-58436. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart