CVE-2025-58436
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-29

Last updated on: 2025-12-04

Assigner: GitHub, Inc.

Description
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-29
Last Modified
2025-12-04
Generated
2026-05-06
AI Q&A
2025-11-29
EPSS Evaluated
2026-05-05
NVD
CVE-2025-58436
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
openprinting cups to 2.4.15 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability in OpenPrinting CUPS occurs when a client connects to the cupsd service and sends data very slowly, for example, only one byte per second. This slow message sending causes the cupsd service to become delayed and unresponsive, making it unusable for other clients. The issue was fixed in version 2.4.15.


How can this vulnerability impact me? :

The vulnerability can cause denial of service by making the cupsd printing service unresponsive to other clients when a slow client connects and sends data slowly. This can disrupt printing operations and availability of the printing service.


What immediate steps should I take to mitigate this vulnerability?

Upgrade OpenPrinting CUPS to version 2.4.15 or later, as this version contains the patch that fixes the vulnerability causing cupsd to become unusable when receiving slow messages.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart