CVE-2010-2941
Fixed in a distro release EPSS 6%
ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.
Products: apple cups, apple mac_os_x, apple mac_os_x_server, fedoraproject fedora, canonical ubuntu_linux, debian_linux, opensuse, suse linux_enterprise, suse linux_enterprise_server, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.4.4-7 |
| Debian 13 | cups | 1.4.4-7 |
| Debian 14 | cups | 1.4.4-7 |
| Debian 5.0 | cups | 1.3.8-1+lenny9 |
| Red Hat Enterprise Linux 5 | cups | 1:1.3.7-18.el5_5.8 |
| Red Hat Enterprise Linux 5 | cups-debuginfo | 1:1.3.7-18.el5_5.8 |
| Red Hat Enterprise Linux 5 | cups-devel | 1:1.3.7-18.el5_5.8 |
| Red Hat Enterprise Linux 5 | cups-libs | 1:1.3.7-18.el5_5.8 |
| Red Hat Enterprise Linux 5 | cups-lpd | 1:1.3.7-18.el5_5.8 |
| Red Hat Enterprise Linux 6 | cups | 1:1.4.2-35.el6_0.1 |
| Red Hat Enterprise Linux 6 | cups-debuginfo | 1:1.4.2-35.el6_0.1 |
| Red Hat Enterprise Linux 6 | cups-devel | 1:1.4.2-35.el6_0.1 |
| Red Hat Enterprise Linux 6 | cups-libs | 1:1.4.2-35.el6_0.1 |
| Red Hat Enterprise Linux 6 | cups-lpd | 1:1.4.2-35.el6_0.1 |
| Red Hat Enterprise Linux 6 | cups-php | 1:1.4.2-35.el6_0.1 |
| openSUSE Tumbleweed | cups | 2.1.3-2.3 |