cups: DoS (daemon crash) caused by the large number of subscriptions

🗓️ 15 Dec 2008 13:25:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 4 Views

CUPS denial of service in older versions via many subscriptions, causing daemon crash from a null pointer.

Reporter	Title	Published	Views	Family All 86
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 5 : cups (CESA-2008:1029)	6 Jan 201000:00	–	nessus
Tenable Nessus	Debian DSA-2176-1 : cups - several vulnerabilities	2 Mar 201100:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	5	i386	cups	1:1.2.4-11.18.el5_2.3	cups-1:1.2.4-11.18.el5_2.3.i386.rpm
Red Hat Enterprise Linux	5	ia64	cups	1:1.2.4-11.18.el5_2.3	cups-1:1.2.4-11.18.el5_2.3.ia64.rpm
Red Hat Enterprise Linux	5	ppc	cups	1:1.2.4-11.18.el5_2.3	cups-1:1.2.4-11.18.el5_2.3.ppc.rpm
Red Hat Enterprise Linux	5	s390x	cups	1:1.2.4-11.18.el5_2.3	cups-1:1.2.4-11.18.el5_2.3.s390x.rpm
Red Hat Enterprise Linux	5	x86_64	cups	1:1.2.4-11.18.el5_2.3	cups-1:1.2.4-11.18.el5_2.3.x86_64.rpm
Red Hat Enterprise Linux	5	i386	cups-debuginfo	1:1.2.4-11.18.el5_2.3	cups-debuginfo-1:1.2.4-11.18.el5_2.3.i386.rpm
Red Hat Enterprise Linux	5	ia64	cups-debuginfo	1:1.2.4-11.18.el5_2.3	cups-debuginfo-1:1.2.4-11.18.el5_2.3.ia64.rpm
Red Hat Enterprise Linux	5	ppc	cups-debuginfo	1:1.2.4-11.18.el5_2.3	cups-debuginfo-1:1.2.4-11.18.el5_2.3.ppc.rpm
Red Hat Enterprise Linux	5	ppc64	cups-debuginfo	1:1.2.4-11.18.el5_2.3	cups-debuginfo-1:1.2.4-11.18.el5_2.3.ppc64.rpm
Red Hat Enterprise Linux	5	s390	cups-debuginfo	1:1.2.4-11.18.el5_2.3	cups-debuginfo-1:1.2.4-11.18.el5_2.3.s390.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2008-5183
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2008-5183
cve	www.cve.org/CVERecord

25 Jun 2026 10:35Current

7.2High risk

Vulners AI Score7.2

CVSS 210

CVSS 3.17.5

EPSS0.0921

cups vulnerability denial of service daemon crash many subscriptions null pointer remote exploit local user cve 2008 5184