CVE-2008-0596

CVE-2008-0596 is a memory-management flaw in CUPS (pre-1.1.22) related to removal of remote shared printers via IPP. A memory leak could lead to CUPS daemon crash or memory exhaustion after processing numerous add/remove requests. Multiple feeds (RHSA-2008:0153/0161, SL/SUSE/Mandriva advisories, ...

CVE-2008-0597

CVE-2008-0597 involves a use-after-free in CUPS prior to 1.1.22 exploited by crafted UDP IPP packets, allowing a remote attacker to crash the CUPS daemon (DoS). Related issues CVE-2008-0596 and CVE-2008-0882 describe additional memory-management flaws (double-free/memory leak) that can crash or e...

Fedora 7 : cups-1.2.12-9.fc7 (2008-1976)

This update contains a back-ported fix for a security issue that may cause cups daemon to crash via special browse requests CVE-2008-0882, 433758, SA28994, STR2656. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Fedora 8 : cups-1.3.6-2.fc8 (2008-1901)

This updates CUPS to the latest stable version. Upstream version contains a fix for a security issue that may cause cups daemon to crash via special browse requests CVE-2008-0882, 433758, SA28994, STR2656. Note that Tenable Network Security has extracted the preceding description block directly...

CentOS 3 / 4 : cups (CESA-2008:0153)

Updated cups packages that fixes two security issues and a bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR...

RHEL 3 : cups (RHSA-2008:0153)

Updated cups packages that fixes two security issues and a bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR...

RHEL 4 : cups (RHSA-2008:0161)

Updated cups packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating...

cups security update

CentOS Errata and Security Advisory CESA-2008:0153 Updated cups packages that fixes two security issues and a bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System...

cups: memory leak handling IPP browse requests

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service memory consumption and daemon crash via a large number of requests to add and remove shared printers...

cups: dereference of free'd memory handling IPP browse requests

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service crash via crafted IPP packets...

Important: Red Hat Security Advisory: cups security update

Updated cups packages that fixes two security issues and a bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR...

cups: dereference of free'd memory handling IPP browse requests

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service crash via crafted IPP packets...

Important: cups security update

1.1.22-0.rc1.9.20.2:.5 - Prevented invalid memory accesses when a class and its singleton printer are timed out in the same sweep CVE-2008-0597, bug 433828. - Back-ported mimeDeleteType from 1.2.x CVE-2008-0596, bug 433828. 1.1.22-0.rc1.9.20.2:.4 - Prevent double-free when a browsed class has the...

PT-2008-2221 · Apple +1 · Cups +1

Name of the Vulnerable Software and Affected Versions: CUPS versions prior to 1.1.22 Description: A memory leak issue allows remote attackers to cause a denial of service, resulting in memory consumption and daemon crash, by sending a large number of requests to add and remove shared printers...

Important: cups security update

1.1.17-13.3.51 - Prevented invalid memory accesses when a class and its singleton printer are timed out in the same sweep CVE-2008-0597, bug 433827. 1.1.17-13.3.50 - Back-ported mimeDeleteType from 1.2.x CVE-2008-0596, bug 433827. 1.1.17-13.3.49 - Prevent double-free when a browsed class has the...

RHEL 5 : cups (RHSA-2008:0157)

Updated cups packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating...

CentOS 5 : cups (CESA-2008:0157)

Updated cups packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating...

cups security update

CentOS Errata and Security Advisory CESA-2008:0157 Updated cups packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides ...

CUPS process_browse_data()双重释放远程拒绝服务漏洞

BUGTRAQ ID: 27906 Common Unix Printing System CUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS的processbrowsedata函数在添加打印机和类时存在安全漏洞，如果远程攻击者向cupsd所监听的端口（默认631/UDP）发送了畸形报文的话，就可能两次释放相同的缓冲区，导致拒绝服务。 Easy Software Products CUPS 1.3.5 Easy Software Products...

cups: double free vulnerability in process_browse_data()

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...