CVE-2008-5183: Null Pointer Dereference

Q: What is the severity of CVE-2008-5183?

CVE-2008-5183 has been categorized with a severity that can lead to denial of service.

Q: How do I fix CVE-2008-5183?

To mitigate CVE-2008-5183, update to a version of CUPS that is not affected, specifically versions later than 1.3.9.

Q: Who is affected by CVE-2008-5183?

CVE-2008-5183 affects local users and potentially remote attackers on CUPS versions 1.3.9 and earlier.

Q: What does CVE-2008-5183 exploit?

CVE-2008-5183 exploits a NULL pointer dereference caused by the addition of a large number of RSS subscriptions.

Q: Can CVE-2008-5183 be exploited remotely?

Yes, CVE-2008-5183 can be triggered remotely by leveraging an additional vulnerability, identified as CVE-2008-5184.

Published Nov 21, 2008

Updated

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.

Affected Software

82 affected components

Apple CUPS=1.1.20

Apple CUPS=1.1.5-2

Apple CUPS=1.1.14

Apple CUPS=1.3-rc2

Apple CUPS=1.1.6-1

Apple CUPS=1.1.18

Apple CUPS=1.1.12

Apple CUPS<=1.3.7

Apple CUPS=1.1.5-1

Apple CUPS=1.3.3

Apple CUPS=1.1.22

Apple CUPS=1.2.0

Apple CUPS=1.1.16

Apple CUPS=1.3.1

Apple CUPS=1.1.23-rc1

Apple CUPS=1.1.20-rc1

Apple CUPS=1.1.15

Apple CUPS=1.1.17

Apple CUPS=1.1.20-rc6

Apple CUPS=1.2.4

Apple CUPS=1.1.19-rc1

Apple CUPS=1.3.2

Apple CUPS=1.1.22-rc1

Apple CUPS=1.1.7

Apple CUPS=1.2-rc2

Apple CUPS=1.1.6-2

Apple CUPS=1.3-b1

Apple CUPS=1.1.3

Apple CUPS=1.2.3

Apple CUPS=1.1.21

Apple CUPS=1.2.9

Apple CUPS=1.2.10

Apple CUPS=1.1.4

Apple CUPS=1.1.23

Apple CUPS=1.2.6

Apple CUPS=1.2-b1

Apple CUPS=1.1.20-rc4

Apple CUPS=1.1.19

Apple CUPS=1.1

Apple CUPS=1.3.4

Apple CUPS=1.1.8

Apple CUPS=1.1.5

Apple CUPS=1.2.1

Apple CUPS=1.2-rc3

Apple CUPS=1.1.2

Apple CUPS=1.1.13

Apple CUPS=1.1.19-rc4

Apple CUPS=1.1.9-1

Apple CUPS=1.2.12

Apple CUPS=1.1.21-rc2

Apple CUPS=1.2-b2

Apple CUPS=1.2.7

Apple CUPS=1.1.6-3

Apple CUPS=1.1.20-rc5

Apple CUPS=1.1.9

Apple CUPS=1.1.19-rc5

Apple CUPS=1.2-rc1

Apple CUPS=1.1.1

Apple CUPS=1.2.8

Apple CUPS=1.2.2

Apple CUPS=1.1.10

Apple CUPS=1.2.11

Apple CUPS=1.1.22-rc2

Apple CUPS=1.1.21-rc1

Apple CUPS=1.3-rc1

Apple CUPS=1.1.11

Apple CUPS=1.1.19-rc3

Apple CUPS=1.1.6

Apple CUPS=1.1.10-1

Apple CUPS=1.3.0

Apple CUPS=1.3.5

Apple CUPS=1.3.6

Apple CUPS=1.1.20-rc2

Apple CUPS=1.1.20-rc3

Apple CUPS=1.2.5

Apple CUPS=1.1.19-rc2

Apple CUPS<=1.3.9

Apple iOS and macOS<10.5.6

Apple Mac OS X Server<10.5.6

openSUSE openSUSE=11.0

Debian Debian Linux=5.0

Debian Debian Linux=6.0

Event History

Nov 21, 2008

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-5183?

CVE-2008-5183 has been categorized with a severity that can lead to denial of service.

How do I fix CVE-2008-5183?

To mitigate CVE-2008-5183, update to a version of CUPS that is not affected, specifically versions later than 1.3.9.

Who is affected by CVE-2008-5183?