Oval Definition:oval:org.mitre.oval:def:22727
Revision Date:2014-05-26Version:20
Title:ELSA-2009:1595: cups security update (Moderate)
Description:Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-2820
CVE-2009-3553
ELSA-2009:1595-02
Platform(s):Oracle Linux 5
Product(s):cups
Definition Synopsis
  • Oracle Linux 5.x
  • AND rpm test
  • cups-lpd is earlier than 1:1.3.7-11.el5_4.4
  • OR cups-devel is earlier than 1:1.3.7-11.el5_4.4
  • OR cups-libs is earlier than 1:1.3.7-11.el5_4.4
  • OR cups is earlier than 1:1.3.7-11.el5_4.4
  • BACK