CVE-2014-4336: The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 all...

Security readout for executives and security teams

CVE-2014-4336 affects cups-browsed in cups-filters before 1.0.53. A malicious or untrusted remote IPP printer could place shell metacharacters in a host name and cause command execution. The sources do not show active exploitation, but the impact is serious where automatic printer discovery is exposed to untrusted networks. Likely exposure is Linux or Unix-like systems running cups-browsed from cups-filters before 1.0.53, especially where remote IPP printer discovery or printer advertisements are accepted from untrusted networks. The provided data does not identify affected distributions or package names. Prioritize remediation for endpoints or servers that discover network printers across shared or untrusted networks. The business risk is remote command execution through printer discovery, but urgency should be based on actual cups-browsed deployment and network exposure. Mitigation focus: Upgrade cups-filters to 1.0.53 or later, or a vendor backport containing the fix.; Check operating-system vendor advisories for the exact fixed package version.; Disable cups-browsed where automatic remote printer discovery is unnecessary..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.