CVE-2025-58060

EUVD-2025-28921
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password is not checked. This results in authentication bypass. Any configuration that allows an `AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
Affected Products (NVD)
VendorProductVersion
openprintingcups
𝑥
< 2.4.13
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
cups
bookworm
2.4.2-3+deb12u9
fixed
bookworm (security)
2.4.2-3+deb12u9
fixed
bullseye
vulnerable
bullseye (security)
2.3.3op2-3+deb11u10
fixed
forky
2.4.18-1
fixed
sid
2.4.18-1
fixed
trixie
2.4.10-3+deb13u2
fixed
trixie (security)
2.4.10-3+deb13u1
fixed
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
cups
suse enterprise desktop 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise server 12 SP3
1.7.5-20.54.1
fixed
suse enterprise server 12 SP5
1.7.5-20.54.1
fixed
suse enterprise server 15 SP2
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.72.1
fixed
cups-client
suse enterprise desktop 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise server 12 SP3
1.7.5-20.54.1
fixed
suse enterprise server 12 SP5
1.7.5-20.54.1
fixed
suse enterprise server 15 SP2
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.72.1
fixed
cups-config
suse enterprise desktop 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP2
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.72.1
fixed
cups-ddk
suse enterprise sap 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP2
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.72.1
fixed
cups-devel
suse enterprise desktop 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise server 12 SP5
1.7.5-20.54.1
fixed
suse enterprise server 15 SP2
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.72.1
fixed
cups-libs
suse enterprise server 12 SP3
1.7.5-20.54.1
fixed
suse enterprise server 12 SP5
1.7.5-20.54.1
fixed
cups-libs-32bit
suse enterprise server 12 SP3
1.7.5-20.54.1
fixed
suse enterprise server 12 SP5
1.7.5-20.54.1
fixed
libcups2
suse enterprise desktop 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP2
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.72.1
fixed
libcups2-32bit
suse enterprise sap 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP2
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.72.1
fixed
libcupscgi1
suse enterprise desktop 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP2
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.72.1
fixed
libcupsimage2
suse enterprise desktop 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP2
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.72.1
fixed
libcupsmime1
suse enterprise desktop 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP2
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.72.1
fixed
libcupsppdc1
suse enterprise desktop 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP2
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP3
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP4
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.72.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.72.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
cups
RHEL 8
1:2.2.6-63.el8_10
fixed
RHEL 8.2 AUS
1:2.2.6-33.el8_2.3
fixed
RHEL 8.4 AUS
1:2.2.6-38.el8_4.3
fixed
RHEL 8.6 AUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 E4S
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 TUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.8 E4S
1:2.2.6-51.el8_8.5
fixed
RHEL 8.8 TUS
1:2.2.6-51.el8_8.5
fixed
RHEL 9
1:2.3.3op2-33.el9_6.1
fixed
cups-client
RHEL 8
1:2.2.6-63.el8_10
fixed
RHEL 8.2 AUS
1:2.2.6-33.el8_2.3
fixed
RHEL 8.4 AUS
1:2.2.6-38.el8_4.3
fixed
RHEL 8.6 AUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 E4S
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 TUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.8 E4S
1:2.2.6-51.el8_8.5
fixed
RHEL 8.8 TUS
1:2.2.6-51.el8_8.5
fixed
RHEL 9
1:2.3.3op2-33.el9_6.1
fixed
cups-devel
RHEL 8
1:2.2.6-63.el8_10
fixed
RHEL 8.2 AUS
1:2.2.6-33.el8_2.3
fixed
RHEL 8.4 AUS
1:2.2.6-38.el8_4.3
fixed
RHEL 8.6 AUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 E4S
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 TUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.8 E4S
1:2.2.6-51.el8_8.5
fixed
RHEL 8.8 TUS
1:2.2.6-51.el8_8.5
fixed
RHEL 9
1:2.3.3op2-33.el9_6.1
fixed
cups-filesystem
RHEL 8
1:2.2.6-63.el8_10
fixed
RHEL 8.2 AUS
1:2.2.6-33.el8_2.3
fixed
RHEL 8.4 AUS
1:2.2.6-38.el8_4.3
fixed
RHEL 8.6 AUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 E4S
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 TUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.8 E4S
1:2.2.6-51.el8_8.5
fixed
RHEL 8.8 TUS
1:2.2.6-51.el8_8.5
fixed
RHEL 9
1:2.3.3op2-33.el9_6.1
fixed
cups-ipptool
RHEL 8
1:2.2.6-63.el8_10
fixed
RHEL 8.2 AUS
1:2.2.6-33.el8_2.3
fixed
RHEL 8.4 AUS
1:2.2.6-38.el8_4.3
fixed
RHEL 8.6 AUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 E4S
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 TUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.8 E4S
1:2.2.6-51.el8_8.5
fixed
RHEL 8.8 TUS
1:2.2.6-51.el8_8.5
fixed
RHEL 9
1:2.3.3op2-33.el9_6.1
fixed
cups-libs
RHEL 8
1:2.2.6-63.el8_10
fixed
RHEL 8.2 AUS
1:2.2.6-33.el8_2.3
fixed
RHEL 8.4 AUS
1:2.2.6-38.el8_4.3
fixed
RHEL 8.6 AUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 E4S
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 TUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.8 E4S
1:2.2.6-51.el8_8.5
fixed
RHEL 8.8 TUS
1:2.2.6-51.el8_8.5
fixed
RHEL 9
1:2.3.3op2-33.el9_6.1
fixed
cups-lpd
RHEL 8
1:2.2.6-63.el8_10
fixed
RHEL 8.2 AUS
1:2.2.6-33.el8_2.3
fixed
RHEL 8.4 AUS
1:2.2.6-38.el8_4.3
fixed
RHEL 8.6 AUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 E4S
1:2.2.6-45.el8_6.6
fixed
RHEL 8.6 TUS
1:2.2.6-45.el8_6.6
fixed
RHEL 8.8 E4S
1:2.2.6-51.el8_8.5
fixed
RHEL 8.8 TUS
1:2.2.6-51.el8_8.5
fixed
RHEL 9
1:2.3.3op2-33.el9_6.1
fixed
cups-printerapp
RHEL 9
1:2.3.3op2-33.el9_6.1
fixed
Common Weakness Enumeration
References
https://github.com/OpenPrinting/cups/commit/595d691075b1d396d2edfaa0a8fd0873a0a1f221
https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
http://www.openwall.com/lists/oss-security/2025/09/11/1
https://lists.debian.org/debian-lts-announce/2025/09/msg00013.html