CVE-2025-58436

Publication date 27 November 2025

Last updated 4 December 2025

Ubuntu priority

Cvss 3 Severity Score

Description

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
cups	25.10 questing	Fixed 2.4.12-0ubuntu3.5
	25.04 plucky	Fixed 2.4.12-0ubuntu1.6
	24.04 LTS noble	Fixed 2.4.7-1.2ubuntu7.9
	22.04 LTS jammy	Fixed 2.4.1op1-1ubuntu4.16
	20.04 LTS focal	Needs evaluation
	18.04 LTS bionic	Needs evaluation
	16.04 LTS xenial	Needs evaluation

Severity score breakdown

Parameter	Value
Base score	5.1 · Medium
Attack vector	Local
Attack complexity	High
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References

Related Ubuntu Security Notices (USN)

USN-7912-1
CUPS vulnerability
4 December 2025