Published: 20/11/2009 Updated: 02/02/2024

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote malicious users to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple cups 1.3.10
apple cups 1.3.7
apple mac os x server
apple mac os x
fedoraproject fedora 10
canonical ubuntu linux 9.04
canonical ubuntu linux 8.10
canonical ubuntu linux 9.10
canonical ubuntu linux 8.04
canonical ubuntu linux 6.06
debian debian linux 5.0
redhat enterprise linux 5.0

Synopsis Moderate: cups security update Type/Severity Security Advisory: Moderate Topic Updated cups packages that fix one security issue are now available for RedHat Enterprise Linux 5This update has been rated as having moderate security impact by the RedHat Security Response Team Description ...

It was discovered that the CUPS scheduler did not properly handle certain network operations A remote attacker could exploit this flaw and cause the CUPS server to crash, resulting in a denial of service This issue only affected Ubuntu 804 LTS, 810, 904 and 910 (CVE-2009-3553, CVE-2010-0302) ...

Debian Bug report logs - #557740 cups: CVE-2009-3553 denial-of-service Package: cups; Maintainer for cups is Debian Printing Team <debian-printing@listsdebianorg>; Source for cups is src:cups (PTS, buildd, popcon) Reported by: Michael Gilbert <michaelsgilbert@gmailcom> Date: Tue, 24 Nov 2009 02:21:01 UTC Severi ...

Debian Bug report logs - #572940 CVE-2010-0302: Incomplete security fix Package: cups; Maintainer for cups is Debian Printing Team <debian-printing@listsdebianorg>; Source for cups is src:cups (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Sun, 7 Mar 2010 19:00:01 UTC Severity: impor ...

Several vulnerabilities have been discovered in the Common UNIX Printing System: CVE-2008-5183 A null pointer dereference in RSS job completion notifications could lead to denial of service CVE-2009-3553 It was discovered that incorrect file descriptor handling could lead to denial of service CVE-2010-0540 A cross-site request for ...

CWE-416 http://www.cups.org/newsgroups.php/newsgroups.php?v6055+gcups.bugs http://secunia.com/advisories/37360 http://www.cups.org/newsgroups.php/newsgroups.php?v5994+gcups.bugs http://www.redhat.com/support/errata/RHSA-2009-1595.html http://secunia.com/advisories/37364 http://www.cups.org/str.php?L3200 http://www.cups.org/newsgroups.php/newsgroups.php?v5996+gcups.bugs http://www.securityfocus.com/bid/37048 https://bugzilla.redhat.com/show_bug.cgi?id=530111 https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00332.html http://support.apple.com/kb/HT4004 http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html http://secunia.com/advisories/38241 http://www.vupen.com/english/advisories/2010/0173 http://www.ubuntu.com/usn/USN-906-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-275230-1 http://www.mandriva.com/security/advisories?name=MDVSA-2010:073 http://www.debian.org/security/2011/dsa-2176 http://www.vupen.com/english/advisories/2011/0535 http://secunia.com/advisories/43521 http://security.gentoo.org/glsa/glsa-201207-10.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11183 https://access.redhat.com/errata/RHSA-2010:0129 https://usn.ubuntu.com/906-1/https://nvd.nist.gov

CVE-2009-3553

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect