CVE-2009-3553
Fixed in a distro release EPSS 4%
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.
Products: apple cups, apple mac_os_x, apple mac_os_x_server, fedoraproject fedora, canonical ubuntu_linux, debian_linux, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.4.2-4 |
| Debian 13 | cups | 1.4.2-4 |
| Debian 14 | cups | 1.4.2-4 |
| Debian 5.0 | cups | 1.3.8-1+lenny9 |
| Red Hat Enterprise Linux 5 | cups | 1:1.3.7-11.el5_4.4 |
| Red Hat Enterprise Linux 5 | cups-debuginfo | 1:1.3.7-11.el5_4.4 |
| Red Hat Enterprise Linux 5 | cups-devel | 1:1.3.7-11.el5_4.4 |
| Red Hat Enterprise Linux 5 | cups-libs | 1:1.3.7-11.el5_4.4 |
| Red Hat Enterprise Linux 5 | cups-lpd | 1:1.3.7-11.el5_4.4 |
| openSUSE Tumbleweed | cups | 2.1.3-2.3 |