CVE Feed

    Dashboard / CVE / CVE-2014-4338

    CVE-2014-4338

    cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpreted as granting browse access to all IP addresses.

    Published:Apr 25, 2014
    Last Modified:Apr 12, 2025
    EPS:Jun 22, 2014
    EPSS Score:0.00628
    CVSS Score:4

    Affected Products

    Vendor
    Linuxfoundation
    Product
    Cups-filters
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-24805 (CVSS 8.8) — cups-filters contains backends, filters, and other software required to get the cups printing service working …
    CVE-2015-8560 (CVSS 7.3) — Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomat…
    CVE-2015-8327 (CVSS 7.5) — Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomat…
    CVE-2015-3279 (CVSS 7.5) — Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to c…
    CVE-2015-3258 (CVSS 7.5) — Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters befo…
    CVE-2015-2265 (CVSS 7.5) — The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers…
    CVE-2014-4336 (CVSS 5.8) — The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows…
    CVE-2014-4337 (CVSS 4.3) — The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows …
    CVE-2014-2707 (CVSS 8.3) — cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via…
    CVE-2013-6473 (CVSS 6.8) — Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High