Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-3553
HistoryNov 20, 2009 - 2:30 a.m.

CVE-2009-3553

2009-11-2002:30:00
CWE-416
[email protected]
web.nvd.nist.gov
6

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.084

Percentile

94.5%

JSON

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
applecupsMatch1.3.7
OR
applecupsMatch1.3.10
OR
applemac_os_xRange<10.5.8
OR
applemac_os_xRange10.6.0–10.6.2
OR
applemac_os_x_serverRange<10.5.8
OR
applemac_os_x_serverRange10.6.0–10.6.2
Node
fedoraprojectfedoraMatch10
Node
canonicalubuntu_linuxMatch6.06
OR
canonicalubuntu_linuxMatch8.04-
OR
canonicalubuntu_linuxMatch8.10
OR
canonicalubuntu_linuxMatch9.04
OR
canonicalubuntu_linuxMatch9.10
Node
debiandebian_linuxMatch5.0
Node
redhatenterprise_linuxMatch5.0

References

Related

checkpoint_advisories 1
debiancve 2
nessus 28
openvas 41
prion 2
cvelist 2
seebug 1
ubuntucve 2
cve 2
veracode 1
centos 1
oraclelinux 2
fedora 9
redhat 1
nvd 1
ubuntu 1
threatpost 1
debian 1
osv 1
gentoo 1
checkpoint_advisories
checkpoint_advisories
Apple CUPS cupsdDoSelect Remote Code Execution attack - Ver2 (CVE-2009-3553)
2014-12-28 00:00:00
debiancve
debiancve
CVE-2009-3553
2009-11-20 02:30:00
CVE-2010-0302
2010-03-05 19:30:00
nessus
nessus
openSUSE Security Update : cups (cups-1671)
2009-12-27 00:00:00
Fedora 10 : cups-1.3.11-4.fc10 (2009-12652)
2009-12-07 00:00:00
openSUSE Security Update : cups (cups-1671)
2009-12-27 00:00:00
openvas
openvas
CUPS 1.3.7 File Descriptors Handling Remote DoS Vulnerability
2009-12-01 00:00:00
CentOS Update for cups CESA-2010:0129 centos5 i386
2011-08-09 00:00:00
CentOS Update for cups CESA-2009:1595 centos5 i386
2011-08-09 00:00:00
prion
prion
Design/Logic Flaw
2009-11-20 02:30:00
Design/Logic Flaw
2010-03-05 19:30:00
cvelist
cvelist
CVE-2009-3553
2009-11-20 02:00:00
CVE-2010-0302
2010-03-05 19:00:00
seebug
seebug
CUPSζ–‡δ»ΆζθΏ°η¬¦ε€„η†θΏœη¨‹ζ‹’η»ζœεŠ‘ζΌζ΄ž
2009-11-19 00:00:00
ubuntucve
ubuntucve
CVE-2009-3553
2009-11-19 00:00:00
CVE-2010-0302
2010-03-03 00:00:00
cve
cve
CVE-2009-3553
2009-11-20 02:30:00
CVE-2010-0302
2010-03-05 19:30:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:39:44
centos
centos
cups security update
2009-11-24 16:44:53
oraclelinux
oraclelinux
cups security update
2009-11-18 00:00:00
cups security update
2010-03-03 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: cups-1.4.2-7.fc12
2009-12-01 04:34:10
[SECURITY] Fedora 12 Update: cups-1.4.2-28.fc12
2010-03-12 04:20:55
[SECURITY] Fedora 13 Update: cups-1.4.2-34.fc13
2010-03-11 13:24:42
redhat
redhat
(RHSA-2009:1595) Moderate: cups security update
2009-11-18 00:00:00
nvd
nvd
CVE-2010-0302
2010-03-05 19:30:00
ubuntu
ubuntu
CUPS vulnerabilities
2010-03-03 00:00:00
threatpost
threatpost
Apple Patches 12 Serious Mac OS X Flaws
2010-01-19 21:27:36
debian
debian
[SECURITY] [DSA 2176-1] cups security update
2011-03-01 23:31:10
osv
osv
cups - several
2011-03-02 00:00:00
gentoo
gentoo
CUPS: Multiple vulnerabilities
2012-07-09 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.084

Percentile

94.5%

JSON
Related for NVD:CVE-2009-3553
checkpoint_advisories1debiancve2nessus28openvas41prion2cvelist2seebug1ubuntucve2cve2veracode1centos1oraclelinux2fedora9redhat1nvd1ubuntu1threatpost1debian1osv1gentoo1