Red Hat Security AdvisoryRHSA-2008:1029
cups security update
Released 2008-12-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) cups-1:1.2.4-11.18.el5_2.3, cups-1:1.2.4-11.18.el5_2.3.i386, cups-1:1.2.4-11.18.el5_2.3.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) cups-1:1.2.4-11.18.el5_2.3, cups-1:1.2.4-11.18.el5_2.3.i386, cups-libs-1:1.2.4-11.18.el5_2.3 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) cups-1:1.2.4-11.18.el5_2.3, cups-devel-1:1.2.4-11.18.el5_2.3, cups-devel-1:1.2.4-11.18.el5_2.3.i386
Fixes 1 record
Priority MEDIUM 45
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0921 · Published 2008-11-21 · Fixed CWE-476
