Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-0597
HistoryFeb 26, 2008 - 12:00 a.m.

CVE-2008-0597

2008-02-2600:00:00
ubuntu.com
ubuntu.com
13

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.114 Low

EPSS

Percentile

95.3%

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other
versions, allows remote attackers to cause a denial of service (crash) via
crafted IPP packets.

Bugs

Notes

Author Note
jdstrand patched code doesn’t exist in 1.2. Also 1.2 and higher uses cupsArrayRestore(), which uses similar checks as the patched code

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.114 Low

EPSS

Percentile

95.3%