CVE-2008-5183

cups: DoS (daemon crash) caused by the large number of subscriptions

Published Nov 21, 2008 CVSS 3.1 · 7.5 High EPSS 9.2% KEV · Not listed
Description
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2176-1 cups security update
Ubuntu USN Ubuntu USN USN-707-1 CUPS vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
canonical
Published
Updated
Aug 7, 2024, 10:40 AM
Reserved
Nov 20, 2008, 12:00 AM
Status
Modified
Published
Nov 21, 2008, 2:30 AM
Modified
Jun 16, 2026, 10:59 PM
Severity
Moderate
Public date
Nov 15, 2008, 12:00 AM