CVE-2009-3553

cups: Use-after-free (crash) due improper reference counting in abstract file descriptors handling interface

Published Nov 20, 2009 CVSS 3.1 · 7.5 High EPSS 3.9% KEV · Not listed
Description
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2176-1 cups security update
Ubuntu USN Ubuntu USN USN-906-1 CUPS vulnerabilities
History

No history.