CVE-2008-5183

Опубликовано: 21 нояб. 2008

Источник: nvd

CVSS3: 7.5

CVSS2: 4.3

EPSS Низкий

Описание

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.

Ссылки

http://lab.gnucitizen.org/projects/cups-0day
Broken Link
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
Mailing List
http://secunia.com/advisories/33937
Broken Link
http://secunia.com/advisories/43521
Broken Link
http://support.apple.com/kb/HT3438
Third Party Advisory
http://www.debian.org/security/2011/dsa-2176
Third Party Advisory
http://www.gnucitizen.org/blog/pwning-ubuntu-via-cups/
Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2009:028
Broken Link
http://www.openwall.com/lists/oss-security/2008/11/19/3
Mailing List
http://www.openwall.com/lists/oss-security/2008/11/19/4
Mailing List
http://www.openwall.com/lists/oss-security/2008/11/20/1
Mailing List
http://www.redhat.com/support/errata/RHSA-2008-1029.html
Broken Link
http://www.securityfocus.com/bid/32419
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1021396
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2009/0422
Broken Link
http://www.vupen.com/english/advisories/2011/0535
Broken Link
https://bugs.launchpad.net/ubuntu/+source/cups/+bug/298241
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/46684
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10586
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*

Версия до 1.3.9 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.5.6 (исключая)

cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*

Версия до 10.5.6 (исключая)

Конфигурация 3

cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01973

Низкий

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2008-5183

CVSS3: 7.5

ubuntu

больше 16 лет назад

CVE-2008-5183

redhat

больше 16 лет назад

CVE-2008-5183

CVSS3: 7.5

debian

больше 16 лет назад

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remot ...

GHSA-9pqm-v858-jg26

CVSS3: 7.5

github

около 3 лет назад

ELSA-2008-1029

oracle-oval

больше 16 лет назад

ELSA-2008-1029: cups security update (MODERATE)

EPSS

Процентиль: 83%

0.01973

Низкий

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476