Red Hat Security AdvisoryRHSA-2009:1083
cups security update
Released 2009-06-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 cups-1:1.1.17-13.3.62, cups-1:1.1.17-13.3.62.i386, cups-devel-1:1.1.17-13.3.62 +3
- Red Hat Enterprise Linux AS version 3 cups-1:1.1.17-13.3.62, cups-1:1.1.17-13.3.62.i386, cups-1:1.1.17-13.3.62.ia64 +9
- Red Hat Enterprise Linux AS version 4 cups-1:1.1.22-0.rc1.9.32.el4_8.3, cups-1:1.1.22-0.rc1.9.32.el4_8.3.i386, cups-1:1.1.22-0.rc1.9.32.el4_8.3.ia64 +9
- Red Hat Enterprise Linux Desktop version 4 cups-1:1.1.22-0.rc1.9.32.el4_8.3, cups-1:1.1.22-0.rc1.9.32.el4_8.3.i386, cups-devel-1:1.1.22-0.rc1.9.32.el4_8.3 +3
- Red Hat Enterprise Linux ES version 3 cups-1:1.1.17-13.3.62, cups-1:1.1.17-13.3.62.i386, cups-1:1.1.17-13.3.62.ia64 +6
- Red Hat Enterprise Linux ES version 4 cups-1:1.1.22-0.rc1.9.32.el4_8.3, cups-1:1.1.22-0.rc1.9.32.el4_8.3.i386, cups-1:1.1.22-0.rc1.9.32.el4_8.3.ia64 +6
- Red Hat Enterprise Linux WS version 3 cups-1:1.1.17-13.3.62, cups-1:1.1.17-13.3.62.i386, cups-1:1.1.17-13.3.62.ia64 +6
- Red Hat Enterprise Linux WS version 4 cups-1:1.1.22-0.rc1.9.32.el4_8.3, cups-1:1.1.22-0.rc1.9.32.el4_8.3.i386, cups-1:1.1.22-0.rc1.9.32.el4_8.3.ia64 +6
Fixes 3 records
Priority MEDIUM 51
The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and da…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.19633 · Published 2009-06-09 · Fixed CWE-908
Priority LOW 39
Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (applicatio…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05544 · Published 2009-06-09 · Fixed CWE-189
Priority LOW 28
The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets,…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02609 · Published 2009-06-09 · Fixed CWE-399
THREATIST.IORead the docs