Red Hat Security AdvisoryRHSA-2010:0811
cups security update
Released 2010-10-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) cups-1:1.3.7-18.el5_5.8, cups-1:1.3.7-18.el5_5.8.i386, cups-1:1.3.7-18.el5_5.8.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) cups-1:1.3.7-18.el5_5.8, cups-1:1.3.7-18.el5_5.8.i386, cups-libs-1:1.3.7-18.el5_5.8 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) cups-1:1.3.7-18.el5_5.8, cups-devel-1:1.3.7-18.el5_5.8, cups-devel-1:1.3.7-18.el5_5.8.i386
Fixes 2 records
Priority MEDIUM 51
ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06418 · Published 2010-11-05 · Fixed CWE-416
Priority LOW 13
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file…
CVSS 2.0LOW 2.6· Local · No auth · Interaction — · EPSS 0.00356 · Published 2010-06-22 · Partial fix CWE-59
