CVE-2008-0597: Use After Free
Published Feb 26, 2008
·Updated
Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets.
Affected Software
10 affected components
redhat Desktop=3.0
redhat Desktop=4.0
redhat Enterprise Linux=as_3
redhat Enterprise Linux=as_4
redhat Enterprise Linux=es_3
redhat Enterprise Linux=es_4
redhat Enterprise Linux=ws_3
redhat Enterprise Linux=ws_4
Easy Software Products Cups=1.1.17
Easy Software Products Cups=1.1.22
Event History
Feb 26, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
12:44 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-0597?
CVE-2008-0597 is classified as a denial of service vulnerability due to its potential to crash the CUPS service.
2
How do I fix CVE-2008-0597?
To fix CVE-2008-0597, upgrade CUPS to version 1.1.22 or later.
3
Who is affected by CVE-2008-0597?
CVE-2008-0597 affects systems running CUPS versions prior to 1.1.22.
4
What does the term 'use-after-free' mean in CVE-2008-0597?
Use-after-free in CVE-2008-0597 refers to the vulnerability where memory that has been freed can still be accessed, leading to crashes or unexpected behavior.
5
Can CVE-2008-0597 be exploited remotely?
Yes, CVE-2008-0597 can be exploited remotely through crafted IPP packets.