Denial Of Service (DoS)

2020-04-1000:47:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

JSON

cups is vulnerable to denial of service. It was discovered that the Red Hat Security Advisory RHSA-2009:1595 did not fully correct the use-after-free flaw in the way CUPS handled references in its file descriptors-handling interface. A remote attacker could send specially-crafted queries to the CUPS server, causing it to crash.

CPENameOperatorVersion
cupseq1.2.4__11.18.el5_2.1
cupseq1.2.4__11.5.1.el5
cupseq1.2.4__11.14.el5
cupseq1.3.7__8.el5
cupseq1.2.4__11.14.el5_1.4
cupseq1.2.4__11.14.el5_1.6
cupseq1.2.4__11.18.el5_2.2
cupseq1.3.7__8.el5_3.6
cupseq1.2.4__11.5.el5
cupseq1.2.4__11.5.3.el5

Name	Operator	Version
cups	eq	1.2.4__11.18.el5_2.1
cups	eq	1.2.4__11.5.1.el5
cups	eq	1.2.4__11.14.el5
cups	eq	1.3.7__8.el5
cups	eq	1.2.4__11.14.el5_1.4
cups	eq	1.2.4__11.14.el5_1.6
cups	eq	1.2.4__11.18.el5_2.2
cups	eq	1.3.7__8.el5_3.6
cups	eq	1.2.4__11.5.el5
cups	eq	1.2.4__11.5.3.el5