CVE-2009-3553 Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote att...
HighCVSS 7.5
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple cups | = 1.3.7 | No fix listed |
| apple cups | = 1.3.10 | No fix listed |
| apple mac os x | < 10.5.8 | 10.5.8 |
| apple mac os x | >= 10.6.0, < 10.6.2 | 10.6.2 |
| apple mac os x server | < 10.5.8 | 10.5.8 |
| apple mac os x server | >= 10.6.0, < 10.6.2 | 10.6.2 |
| fedoraproject fedora | = 10 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
| Canonical Ubuntu Linux | = 8.10 | No fix listed |
| Canonical Ubuntu Linux | = 9.04 | No fix listed |
| Canonical Ubuntu Linux | = 9.10 | No fix listed |
| debian linux | = 5.0 | No fix listed |
| redhat enterprise linux | = 5.0 | No fix listed |
| debian/cups(Debian:12) | < 1.4.2-4 | 1.4.2-4 |
| debian/cups(Debian:13) | < 1.4.2-4 | 1.4.2-4 |
| debian/cups(Debian:14) | < 1.4.2-4 | 1.4.2-4 |
References
- APPLE-SA-2010-01-19-1 mailing-list vendor-advisory
- 37360 broken-link third-party-advisory vendor-advisory
- 37364 broken-link third-party-advisory vendor-advisory
- 38241 broken-link third-party-advisory
- 43521 broken-link third-party-advisory
- GLSA-201207-10 third-party-advisory vendor-advisory
- 275230 broken-link vendor-advisory
- support.apple.com vendor-advisory
- www.cups.org broken-link patch vendor-advisory
- www.cups.org broken-link patch vendor-advisory
- www.cups.org broken-link patch vendor-advisory
- www.cups.org broken-link patch vendor-advisory
- DSA-2176 mailing-list vendor-advisory
- MDVSA-2010:073 broken-link vendor-advisory
- RHSA-2009:1595 broken-link vendor-advisory
- 37048 broken-link third-party-advisory vdb-entry
- USN-906-1 third-party-advisory vendor-advisory
- ADV-2010-0173 broken-link vdb-entry
- ADV-2011-0535 broken-link vdb-entry
- bugzilla.redhat.com issue-tracking
- oval:org.mitre.oval:def:11183 broken-link signature vdb-entry
- FEDORA-2009-12652 mailing-list vendor-advisory
- Debian Security Tracker CVE-2009-3553 vendor-advisory
- bugs.debian.org issue-tracking