CVE-2005-2874: The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote atta...

Security readout for executives and security teams

A remote HTTP request to a vulnerable CUPS print daemon could make it consume CPU in a tight loop, disrupting printing and possibly affecting the host. The issue applies to CUPS before 1.1.23. Current evidence does not show active exploitation. Exposure is most likely on legacy Unix or Linux systems running CUPS before 1.1.23 where the CUPS daemon HTTP interface is reachable from users or networks that should not control printing. Treat as a targeted legacy exposure item, not a broad emergency. Prioritize internet-facing or broadly reachable print services, especially unsupported systems that may miss old vendor fixes. Mitigation focus: Upgrade CUPS to 1.1.23 or a vendor package containing the fix.; Apply relevant Red Hat or Fedora errata for affected operating systems.; Restrict network access to the CUPS daemon to trusted administrative sources..

Prepared

Jun 29, 2026, 17:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.