Back to Database
Status published
Medium
CVE-2025-58436
OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack
Vulnerability Description
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-58436
Credits & Attribution
No credits recorded in the NVD database.
References
More from OpenPrinting
View All →CVE-2025-64524
CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution
Low
3.3
CVE-2025-64503
[BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftoraster
Medium
4
CVE-2025-61915
OpenPrinting CUPS vulnerable to stack based out-of-bound write
Medium
6
CVE-2025-58364
cups: Remote DoS via null dereference
Medium
6.5
CVE-2025-58060
cups has Authentication bypass with AuthType Negotiate
High
8
Affected Vendor
OpenPrinting
View all reports →Affected Software
cups
Vulnerable Versions:
< 2.4.15
Timeline
Official Publish:
November 29th, 2025
Last Modified:
December 3rd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H