CVE-2024-35235

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

Vulnerability in CUPS printing system versions 2.4.8 and earlier. When starting the cupsd server with a Listen configuration pointing to a symbolic link, the process can perform an arbitrary chmod on the target file.

Risk Assessment

An attacker can change permissions of any file on the system, potentially leading to privilege escalation or data integrity compromise.

Recommendation

Update CUPS to the latest version. Avoid using symbolic links in the Listen configuration.

Original NVD description (English source)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provid