p PatchFirst

CVE-2026-64611

CVE-2026-64611 · Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel()

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially crafted printer advertisement, leading to denial of service.

CVSS 7.5 · High · EPSS 0.6%

Published
Updated

Stack: system

Affected products and versions

  • red hat enterprise linux 10

    Versions
    • ≥ 1:2.0.0-13.el10_2: Not affected (rpm)

    No fix published

  • red hat enterprise linux 10

    No fix published

  • red hat enterprise linux 7

    No fix published

  • red hat enterprise linux 8

    No fix published

  • red hat enterprise linux 9

    No fix published

  • libcupsfilters Debian:13

    Versions
    • 2.0.0-3
    • 2.0.0-3+deb13u1
    • 2.1.1-1
    • 2.1.1-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libcupsfilters Debian:14

    Versions
    • 2.0.0-3
    • 2.1.1-1
    • 2.1.1-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:Pro:16.04:LTS

    Versions
    • 1.0.76-1
    • 1.1.0-1
    • 1.1.0-1build1
    • 1.3.0-1
    • 1.4.0-1
    • 1.5.0-1
    • 1.6.0-1
    • 1.7.0-1
    • 1.8.1-1
    • 1.8.2-1
    • 1.8.2-2
    • 1.8.2-2ubuntu2
    • 1.8.2-2ubuntu3
    • 1.8.3-2ubuntu1
    • 1.8.3-2ubuntu2
    • 1.8.3-2ubuntu3
    • 1.8.3-2ubuntu3.1
    • 1.8.3-2ubuntu3.4
    • 1.8.3-2ubuntu3.5
    • 1.8.3-2ubuntu3.5+esm1
    • 1.8.3-2ubuntu3.5+esm2
    • 1.8.3-2ubuntu3.5+esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:Pro:18.04:LTS

    Versions
    • 1.17.9-0ubuntu1
    • 1.17.9-1
    • 1.20.0-2
    • 1.20.1-1
    • 1.20.1-1build1
    • 1.20.2-0ubuntu1
    • 1.20.2-0ubuntu2
    • 1.20.2-0ubuntu3
    • 1.20.2-0ubuntu3.1
    • 1.20.2-0ubuntu3.3
    • 1.20.2-0ubuntu3.3+esm1
    • 1.20.2-0ubuntu3.3+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:Pro:20.04:LTS

    Versions
    • 1.25.11-0ubuntu1
    • 1.25.11-1
    • 1.25.12-1
    • 1.25.13-1
    • 1.26.0-1
    • 1.26.1-1
    • 1.26.2-1
    • 1.27.0-1
    • 1.27.0-2
    • 1.27.1-1
    • 1.27.1-2
    • 1.27.1-3
    • 1.27.2-1
    • 1.27.3-1
    • 1.27.4-1
    • 1.27.4-1ubuntu0.2
    • 1.27.4-1ubuntu0.3
    • 1.27.4-1ubuntu0.4
    • 1.27.4-1ubuntu0.4+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:22.04:LTS

    Versions
    • 1.28.10-2
    • 1.28.11-1
    • 1.28.11-2
    • 1.28.12-1
    • 1.28.13-0ubuntu1
    • 1.28.14-1
    • 1.28.15-0ubuntu1
    • 1.28.15-0ubuntu1.2
    • 1.28.15-0ubuntu1.3
    • 1.28.15-0ubuntu1.4
    • 1.28.15-0ubuntu1.5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:24.04:LTS

    Versions
    • 2.0.0-0ubuntu1
    • 2.0.0-0ubuntu3
    • 2.0.0-0ubuntu4
    • 2.0.0-0ubuntu4.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libcupsfilters Ubuntu:24.04:LTS

    Versions
    • 2.0.0-0ubuntu1
    • 2.0.0-0ubuntu6
    • 2.0.0-0ubuntu7
    • 2.0.0-0ubuntu7.1
    • 2.0.0-0ubuntu7.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:26.10

    Versions
    • 2.0.1-0ubuntu4
    • 2.0.1-0ubuntu5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libcupsfilters Ubuntu:26.10

    Versions
    • 2.1.1-0ubuntu5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:26.04:LTS

    Versions
    • 2.0.1-0ubuntu3
    • 2.0.1-0ubuntu4
    • 2.0.1-0ubuntu4.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libcupsfilters Ubuntu:26.04:LTS

    Versions
    • 2.1.1-0ubuntu3
    • 2.1.1-0ubuntu4
    • 2.1.1-0ubuntu5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →