CVE-2008-5183
CVE-2008-5183
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.
CVSS 7.5 · Alta · EPSS 9,2% · Código de explotación público · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
cups Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.3.9-13
Actualiza a 1.3.9-13
cups Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.3.9-13
Actualiza a 1.3.9-13
cups Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.3.9-13
Actualiza a 1.3.9-13
Fuentes originales
- https://www.exploit-db.com/exploits/7150
- http://secunia.com/advisories/33937
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10586
- http://www.openwall.com/lists/oss-security/2008/11/20/1
- http://www.openwall.com/lists/oss-security/2008/11/19/3
- http://www.openwall.com/lists/oss-security/2008/11/19/4
- http://support.apple.com/kb/HT3438
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
- http://www.debian.org/security/2011/dsa-2176
- http://www.securitytracker.com/id?1021396
- http://www.gnucitizen.org/blog/pwning-ubuntu-via-cups/
- http://www.vupen.com/english/advisories/2011/0535
- http://www.vupen.com/english/advisories/2009/0422
- http://www.securityfocus.com/bid/32419
- http://www.redhat.com/support/errata/RHSA-2008-1029.html
- http://secunia.com/advisories/43521
- http://lab.gnucitizen.org/projects/cups-0day
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46684
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:028
- https://bugs.launchpad.net/ubuntu/+source/cups/+bug/298241
- https://nvd.nist.gov/vuln/detail/CVE-2008-5183