Red Hat Security AdvisoryRHSA-2010:0866
cups security update
Released 2010-11-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) cups-1:1.4.2-35.el6_0.1, cups-libs-1:1.4.2-35.el6_0.1, cups-lpd-1:1.4.2-35.el6_0.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) cups-1:1.4.2-35.el6_0.1, cups-devel-1:1.4.2-35.el6_0.1, cups-php-1:1.4.2-35.el6_0.1
- Red Hat Enterprise Linux HPC Node (v. 6) cups-1:1.4.2-35.el6_0.1, cups-libs-1:1.4.2-35.el6_0.1, cups-lpd-1:1.4.2-35.el6_0.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) cups-1:1.4.2-35.el6_0.1, cups-devel-1:1.4.2-35.el6_0.1, cups-php-1:1.4.2-35.el6_0.1
- Red Hat Enterprise Linux Server (v. 6) cups-1:1.4.2-35.el6_0.1, cups-devel-1:1.4.2-35.el6_0.1, cups-devel-1:1.4.2-35.el6_0.1.ppc +3
- Red Hat Enterprise Linux Server Optional (v. 6) cups-1:1.4.2-35.el6_0.1, cups-php-1:1.4.2-35.el6_0.1
- Red Hat Enterprise Linux Workstation (v. 6) cups-1:1.4.2-35.el6_0.1, cups-devel-1:1.4.2-35.el6_0.1, cups-libs-1:1.4.2-35.el6_0.1 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) cups-1:1.4.2-35.el6_0.1, cups-php-1:1.4.2-35.el6_0.1
Fixes 1 record
Priority MEDIUM 51
ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06418 · Published 2010-11-05 · Fixed CWE-416
