CVE-2009-3553

HIGH

CUPS 1.3.7 and 1.3.10 - Use-After-Free in File-Descriptor Handling

Title source: llm
STIX 2.1

Description

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.

References (22)

Core 22
Core References
Broken Link, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37364
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-906-1
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-1595.html
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/37048
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT4004
Mailing List vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2176
Broken Link, Patch, Vendor Advisory x_refsource_misc
http://www.cups.org/newsgroups.php/newsgroups.php?v5996+gcups.bugs
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201207-10.xml
Broken Link vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0535
Broken Link, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37360
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2010:073
Broken Link, Patch, Vendor Advisory x_refsource_misc
http://www.cups.org/str.php?L3200
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=530111
Broken Link, Patch, Vendor Advisory x_refsource_misc
http://www.cups.org/newsgroups.php/newsgroups.php?v5994+gcups.bugs
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43521
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38241
Broken Link, Patch, Vendor Advisory x_refsource_misc
http://www.cups.org/newsgroups.php/newsgroups.php?v6055+gcups.bugs
Broken Link vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-66-275230-1
Broken Link vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0173

Scores

CVSS v3 7.5
EPSS 0.0391
EPSS Percentile 89.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-416
Status published
Products (12)
apple/cups 1.3.7
apple/cups 1.3.10
apple/mac_os_x < 10.5.8
apple/mac_os_x_server < 10.5.8
canonical/ubuntu_linux 6.06
canonical/ubuntu_linux 8.04
canonical/ubuntu_linux 8.10
canonical/ubuntu_linux 9.04
canonical/ubuntu_linux 9.10
debian/debian_linux 5.0
... and 2 more
Published Nov 20, 2009
Tracked Since Feb 18, 2026