Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-3553

Опубликовано: 15 мая 2009
Источник: redhat
CVSS2: 3.3
EPSS Низкий

Описание

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=530111cups: Use-after-free (crash) due improper reference counting in abstract file descriptors handling interface

EPSS

Процентиль: 93%
0.09847
Низкий

3.3 Low

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 15 лет назад

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.

CVSS3: 7.5
nvd
больше 15 лет назад

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.

CVSS3: 7.5
debian
больше 15 лет назад

Use-after-free vulnerability in the abstract file-descriptor handling ...

CVSS3: 7.5
github
около 3 лет назад

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.

oracle-oval
больше 15 лет назад

ELSA-2009-1595: cups security update (MODERATE)

EPSS

Процентиль: 93%
0.09847
Низкий

3.3 Low

CVSS2