CVE-2021-25317

05.05.2021, 10:15

A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	3.3 LOW	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 27%

Affected Products (NVD)

Vendor	Product	Version
suse	cups	𝑥 < 1.3.9
suse	cups	𝑥 < 2.2.7
suse	cups	𝑥 < 1.7.5
suse	cups	𝑥 < 2.2.7
suse	cups	𝑥 ≤ 2.3.3op2-2.1

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

cups

bookworm	2.4.2-3+deb12u7 fixed
bookworm (security)	2.4.2-3+deb12u8 fixed
bullseye	2.3.3op2-3+deb11u8 fixed
bullseye (security)	2.3.3op2-3+deb11u9 fixed
sid	2.4.10-2 fixed
trixie	2.4.10-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

cups

bionic	not-affected
focal	not-affected
groovy	not-affected
hirsute	not-affected
trusty	dne
xenial	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

cups

suse enterprise desktop 15 SP2	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP3	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP4	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP5	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP6	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP7	2.2.7-3.26.1 fixed
suse enterprise sap 12 SP3	1.7.5-20.36.1 fixed
suse enterprise sap 12 SP4	1.7.5-20.36.1 fixed
suse enterprise sap 12 SP5	1.7.5-20.36.1 fixed
suse enterprise sap 15	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP1	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP2	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP3	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP4	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP5	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP6	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP7	2.2.7-3.26.1 fixed
suse enterprise server 12 SP2	1.7.5-20.36.1 fixed
suse enterprise server 12 SP3	1.7.5-20.36.1 fixed
suse enterprise server 12 SP4	1.7.5-20.36.1 fixed
suse enterprise server 12 SP5	1.7.5-20.36.1 fixed
suse enterprise server 15	2.2.7-3.26.1 fixed
suse enterprise server 15 SP1	2.2.7-3.26.1 fixed
suse enterprise server 15 SP2	2.2.7-3.26.1 fixed
suse enterprise server 15 SP3	2.2.7-3.26.1 fixed
suse enterprise server 15 SP4	2.2.7-3.26.1 fixed
suse enterprise server 15 SP5	2.2.7-3.26.1 fixed
suse enterprise server 15 SP6	2.2.7-3.26.1 fixed
suse enterprise server 15 SP7	2.2.7-3.26.1 fixed

cups-client

suse enterprise desktop 15 SP2	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP3	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP4	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP5	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP6	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP7	2.2.7-3.26.1 fixed
suse enterprise sap 12 SP3	1.7.5-20.36.1 fixed
suse enterprise sap 12 SP4	1.7.5-20.36.1 fixed
suse enterprise sap 12 SP5	1.7.5-20.36.1 fixed
suse enterprise sap 15	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP1	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP2	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP3	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP4	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP5	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP6	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP7	2.2.7-3.26.1 fixed
suse enterprise server 12 SP2	1.7.5-20.36.1 fixed
suse enterprise server 12 SP3	1.7.5-20.36.1 fixed
suse enterprise server 12 SP4	1.7.5-20.36.1 fixed
suse enterprise server 12 SP5	1.7.5-20.36.1 fixed
suse enterprise server 15	2.2.7-3.26.1 fixed
suse enterprise server 15 SP1	2.2.7-3.26.1 fixed
suse enterprise server 15 SP2	2.2.7-3.26.1 fixed
suse enterprise server 15 SP3	2.2.7-3.26.1 fixed
suse enterprise server 15 SP4	2.2.7-3.26.1 fixed
suse enterprise server 15 SP5	2.2.7-3.26.1 fixed
suse enterprise server 15 SP6	2.2.7-3.26.1 fixed
suse enterprise server 15 SP7	2.2.7-3.26.1 fixed

cups-config

suse enterprise desktop 15 SP2	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP3	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP4	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP5	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP6	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP7	2.2.7-3.26.1 fixed
suse enterprise sap 15	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP1	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP2	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP3	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP4	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP5	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP6	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP7	2.2.7-3.26.1 fixed
suse enterprise server 15	2.2.7-3.26.1 fixed
suse enterprise server 15 SP1	2.2.7-3.26.1 fixed
suse enterprise server 15 SP2	2.2.7-3.26.1 fixed
suse enterprise server 15 SP3	2.2.7-3.26.1 fixed
suse enterprise server 15 SP4	2.2.7-3.26.1 fixed
suse enterprise server 15 SP5	2.2.7-3.26.1 fixed
suse enterprise server 15 SP6	2.2.7-3.26.1 fixed
suse enterprise server 15 SP7	2.2.7-3.26.1 fixed

cups-ddk

suse enterprise sap 15	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP1	2.2.7-3.26.1 fixed
suse enterprise server 15	2.2.7-3.26.1 fixed
suse enterprise server 15 SP1	2.2.7-3.26.1 fixed

cups-devel

suse enterprise desktop 15 SP2	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP3	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP4	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP5	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP6	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP7	2.2.7-3.26.1 fixed
suse enterprise sap 15	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP1	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP2	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP3	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP4	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP5	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP6	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP7	2.2.7-3.26.1 fixed
suse enterprise server 15	2.2.7-3.26.1 fixed
suse enterprise server 15 SP1	2.2.7-3.26.1 fixed
suse enterprise server 15 SP2	2.2.7-3.26.1 fixed
suse enterprise server 15 SP3	2.2.7-3.26.1 fixed
suse enterprise server 15 SP4	2.2.7-3.26.1 fixed
suse enterprise server 15 SP5	2.2.7-3.26.1 fixed
suse enterprise server 15 SP6	2.2.7-3.26.1 fixed
suse enterprise server 15 SP7	2.2.7-3.26.1 fixed

cups-libs

suse enterprise sap 12 SP3	1.7.5-20.36.1 fixed
suse enterprise sap 12 SP4	1.7.5-20.36.1 fixed
suse enterprise sap 12 SP5	1.7.5-20.36.1 fixed
suse enterprise server 12 SP2	1.7.5-20.36.1 fixed
suse enterprise server 12 SP3	1.7.5-20.36.1 fixed
suse enterprise server 12 SP4	1.7.5-20.36.1 fixed
suse enterprise server 12 SP5	1.7.5-20.36.1 fixed

cups-libs-32bit

suse enterprise sap 12 SP3	1.7.5-20.36.1 fixed
suse enterprise sap 12 SP4	1.7.5-20.36.1 fixed
suse enterprise sap 12 SP5	1.7.5-20.36.1 fixed
suse enterprise server 12 SP2	1.7.5-20.36.1 fixed
suse enterprise server 12 SP3	1.7.5-20.36.1 fixed
suse enterprise server 12 SP4	1.7.5-20.36.1 fixed
suse enterprise server 12 SP5	1.7.5-20.36.1 fixed

libcups2

suse enterprise desktop 15 SP2	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP3	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP4	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP5	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP6	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP7	2.2.7-3.26.1 fixed
suse enterprise sap 15	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP1	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP2	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP3	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP4	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP5	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP6	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP7	2.2.7-3.26.1 fixed
suse enterprise server 15	2.2.7-3.26.1 fixed
suse enterprise server 15 SP1	2.2.7-3.26.1 fixed
suse enterprise server 15 SP2	2.2.7-3.26.1 fixed
suse enterprise server 15 SP3	2.2.7-3.26.1 fixed
suse enterprise server 15 SP4	2.2.7-3.26.1 fixed
suse enterprise server 15 SP5	2.2.7-3.26.1 fixed
suse enterprise server 15 SP6	2.2.7-3.26.1 fixed
suse enterprise server 15 SP7	2.2.7-3.26.1 fixed

libcups2-32bit

suse enterprise desktop 15 SP2	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP3	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP4	2.2.7-3.26.1 fixed
suse enterprise sap 15	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP1	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP2	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP3	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP4	2.2.7-3.26.1 fixed
suse enterprise server 15	2.2.7-3.26.1 fixed
suse enterprise server 15 SP1	2.2.7-3.26.1 fixed
suse enterprise server 15 SP2	2.2.7-3.26.1 fixed
suse enterprise server 15 SP3	2.2.7-3.26.1 fixed
suse enterprise server 15 SP4	2.2.7-3.26.1 fixed

libcupscgi1

suse enterprise desktop 15 SP2	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP3	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP4	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP5	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP6	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP7	2.2.7-3.26.1 fixed
suse enterprise sap 15	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP1	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP2	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP3	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP4	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP5	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP6	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP7	2.2.7-3.26.1 fixed
suse enterprise server 15	2.2.7-3.26.1 fixed
suse enterprise server 15 SP1	2.2.7-3.26.1 fixed
suse enterprise server 15 SP2	2.2.7-3.26.1 fixed
suse enterprise server 15 SP3	2.2.7-3.26.1 fixed
suse enterprise server 15 SP4	2.2.7-3.26.1 fixed
suse enterprise server 15 SP5	2.2.7-3.26.1 fixed
suse enterprise server 15 SP6	2.2.7-3.26.1 fixed
suse enterprise server 15 SP7	2.2.7-3.26.1 fixed

libcupsimage2

suse enterprise desktop 15 SP2	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP3	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP4	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP5	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP6	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP7	2.2.7-3.26.1 fixed
suse enterprise sap 15	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP1	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP2	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP3	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP4	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP5	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP6	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP7	2.2.7-3.26.1 fixed
suse enterprise server 15	2.2.7-3.26.1 fixed
suse enterprise server 15 SP1	2.2.7-3.26.1 fixed
suse enterprise server 15 SP2	2.2.7-3.26.1 fixed
suse enterprise server 15 SP3	2.2.7-3.26.1 fixed
suse enterprise server 15 SP4	2.2.7-3.26.1 fixed
suse enterprise server 15 SP5	2.2.7-3.26.1 fixed
suse enterprise server 15 SP6	2.2.7-3.26.1 fixed
suse enterprise server 15 SP7	2.2.7-3.26.1 fixed

libcupsmime1

suse enterprise desktop 15 SP2	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP3	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP4	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP5	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP6	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP7	2.2.7-3.26.1 fixed
suse enterprise sap 15	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP1	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP2	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP3	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP4	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP5	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP6	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP7	2.2.7-3.26.1 fixed
suse enterprise server 15	2.2.7-3.26.1 fixed
suse enterprise server 15 SP1	2.2.7-3.26.1 fixed
suse enterprise server 15 SP2	2.2.7-3.26.1 fixed
suse enterprise server 15 SP3	2.2.7-3.26.1 fixed
suse enterprise server 15 SP4	2.2.7-3.26.1 fixed
suse enterprise server 15 SP5	2.2.7-3.26.1 fixed
suse enterprise server 15 SP6	2.2.7-3.26.1 fixed
suse enterprise server 15 SP7	2.2.7-3.26.1 fixed

libcupsppdc1

suse enterprise desktop 15 SP2	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP3	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP4	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP5	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP6	2.2.7-3.26.1 fixed
suse enterprise desktop 15 SP7	2.2.7-3.26.1 fixed
suse enterprise sap 15	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP1	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP2	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP3	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP4	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP5	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP6	2.2.7-3.26.1 fixed
suse enterprise sap 15 SP7	2.2.7-3.26.1 fixed
suse enterprise server 15	2.2.7-3.26.1 fixed
suse enterprise server 15 SP1	2.2.7-3.26.1 fixed
suse enterprise server 15 SP2	2.2.7-3.26.1 fixed
suse enterprise server 15 SP3	2.2.7-3.26.1 fixed
suse enterprise server 15 SP4	2.2.7-3.26.1 fixed
suse enterprise server 15 SP5	2.2.7-3.26.1 fixed
suse enterprise server 15 SP6	2.2.7-3.26.1 fixed
suse enterprise server 15 SP7	2.2.7-3.26.1 fixed

Common Weakness Enumeration

CWE-276 - Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.

References

https://bugzilla.suse.com/show_bug.cgi?id=1184161

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWPGZLT3U776Q5YPPSA6LGFWWBDWBVH3/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H74BP746O5NNVCBUTLLZYAFBPESFVECV/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S37IDQGHTORQ3Z6VRDQIGBYVOI27YG47/

https://bugzilla.suse.com/show_bug.cgi?id=1184161

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWPGZLT3U776Q5YPPSA6LGFWWBDWBVH3/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H74BP746O5NNVCBUTLLZYAFBPESFVECV/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S37IDQGHTORQ3Z6VRDQIGBYVOI27YG47/