Description
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta.
References (10)
Scores
CVSS v3
7.5
EPSS
0.0733
EPSS Percentile
91.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-252
Status
published
Products (5)
apple/cups
1.1.14 - 1.1.17
apple/mac_os_x
10.2
apple/mac_os_x
10.2.2
debian/debian_linux
2.2
debian/debian_linux
3.0
Published
Dec 26, 2002
Tracked Since
Feb 18, 2026