Oracle: Security Advisory (ELSA-2010-0811)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : cups (openSUSE-SU-2010:1018-1)

This updates fix several bugs, but only the security fixes are listed here : - CVE-2010-2941: CVSS v2 Base Score: 3.3 AV:A/AC:L/Au:N/C:N/I:N/A:P: CWE-399 Special IPP requests allow to crashcupsd remotely. - CVE-2010-0542: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P: CWE-264 A NULL pointer...

Oracle Linux 6 : cups (ELSA-2010-0866)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0866 advisory. 1:1.4.2-35:.1 - Applied patch to fix cupsd memory corruption vulnerability CVE-2010-2941, STR 3648, bug 624438. Tenable has extracted the preceding description...

Scientific Linux Security Update : cups on SL5.x i386/x86_64

A use-after-free flaw was found in the way the CUPS server parsed Internet Printing Protocol IPP packets. A malicious user able to send IPP requests to the CUPS server could use this flaw to crash the CUPS server or, potentially, execute arbitrary code with the privileges of the CUPS server...

Scientific Linux Security Update : cups on SL6.x i386/x86_64

An invalid free flaw was found in the way the CUPS server parsed Internet Printing Protocol IPP packets. A malicious user able to send IPP requests to the CUPS server could use this flaw to crash the CUPS server. CVE-2010-2941 After installing this update, the cupsd daemon will be restarted...

openSUSE Security Update : cups (openSUSE-SU-2010:1018-1)

This updates fix several bugs, but only the security fixes are listed here : - CVE-2010-2941: CVSS v2 Base Score: 3.3 AV:A/AC:L/Au:N/C:N/I:N/A:P: CWE-399 Special IPP requests allow to crashcupsd remotely. - CVE-2010-0542: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P: CWE-264 A NULL pointer...

openSUSE Security Update : cups (openSUSE-SU-2010:1018-1)

This updates fix several bugs, but only the security fixes are listed here : - CVE-2010-2941: CVSS v2 Base Score: 3.3 AV:A/AC:L/Au:N/C:N/I:N/A:P: CWE-399 Special IPP requests allow to crashcupsd remotely. - CVE-2010-0542: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P: CWE-264 A NULL pointer...

Debian Security Advisory DSA 2176-1 (cups)

The remote host is missing an update to cups announced via advisory DSA 2176-1. OpenVAS Vulnerability Test $Id: deb21761.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2176-1 cups Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

DSA-2176-1 cups - several

Bulletin has no description...

cups security update

1:1.4.2-35:.1 - Applied patch to fix cupsd memory corruption vulnerability CVE-2010-2941, STR 3648, bug 624438...

SuSE 11 / 11.1 Security Update : CUPS (SAT Patch Numbers 3575 / 3576)

This updates fix several bugs, but only the security fixes are listed here : - Special IPP requests allow to crash cupsd remotely. CVE-2010-2941: CVSS v2 Base Score: 3.3 AV:A/AC:L/Au:N/C:N/I:N/A:P: CWE-399 - A NULL pointer dereference exists in the WriteProlog function of the texttops image filte...

CentOS 5 : cups (CESA-2010:0811)

Updated cups packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Fedora Update for cups FEDORA-2010-17615

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for cups FEDORA-2010-17615

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2010-17615 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora 13 : cups-1.4.4-11.fc13 (2010-17615)

This update fixes a cupsd memory corruption vulnerability CVE-2010-2941, as well as fixing a crash when the MIME database cannot be loaded for any reason. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Mandriva Update for cups MDVSA-2010:232 (cups)

Check for the Version of cups OpenVAS Vulnerability Test Mandriva Update for cups MDVSA-2010:232 cups Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for cups FEDORA-2010-17627

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 6 : cups (RHSA-2010:0866)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0866 advisory. The Common UNIX Printing System CUPS provides a portable printing layer for UNIX operating systems. An invalid free flaw was found in the way the CUP...

Important: Red Hat Security Advisory: cups security update

Updated cups packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2010-2941

ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service use-after-free and application crash or possibly execute arbitrary code via a crafted IPP request...