CVE-2008-5183
Fixed in a distro release EPSS 9%
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.
Products: apple cups, apple mac_os_x, apple mac_os_x_server, opensuse, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.3.9-13 |
| Debian 13 | cups | 1.3.9-13 |
| Debian 14 | cups | 1.3.9-13 |
| Debian 5.0 | cups | 1.3.8-1+lenny9 |
| Red Hat Enterprise Linux 5 | cups | 1:1.2.4-11.18.el5_2.3 |
| Red Hat Enterprise Linux 5 | cups-debuginfo | 1:1.2.4-11.18.el5_2.3 |
| Red Hat Enterprise Linux 5 | cups-devel | 1:1.2.4-11.18.el5_2.3 |
| Red Hat Enterprise Linux 5 | cups-libs | 1:1.2.4-11.18.el5_2.3 |
| Red Hat Enterprise Linux 5 | cups-lpd | 1:1.2.4-11.18.el5_2.3 |