CVE-2009-0577: Buffer Overflow
Description of problem: rpmbuild cannot apply cups-CVE-2008-3640.patch due to the patch corruption.
Version-Release number of selected component (if applicable): cups-1.1.17-13.3.54.src.rpm cups-1.1.17-13.3.55.src.rpm
How reproducible: always
Steps to Reproduce: 1. rpm -i cups-1.1.17-13.3.54.src.rpm 2. rpmbuild -bp /usr/src/redhat/SPEC/cups.spec Actual results: error: File /usr/src/redhat/SOURCES/cups-CVE-2008-3640.patch is smaller than 4 bytes
Expected results: Unpack the sources and apply the patch.
Additional info:
Other sources
Integer overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2008-3640.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch cups-CVE-2008-3640.patch - Operational
Unpack the sources and apply the patch file named cups-CVE-2008-3640.patch (place it in /usr/src/redhat/SOURCES and run rpmbuild -bp /usr/src/redhat/SPEC/cups.spec). If rpmbuild fails with 'File /usr/src/redhat/SOURCES/cups-CVE-2008-3640.patch is smaller than 4 bytes' or 'rpmbuild cannot apply cups-CVE-2008-3640.patch due to the patch corruption', replace the corrupted /usr/src/redhat/SOURCES/cups-CVE-2008-3640.patch with a valid (non-corrupted) cups-CVE-2008-3640.patch and re-run rpmbuild -bp /usr/src/redhat/SPEC/cups.spec.
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0577?
CVE-2009-0577 has been classified as a medium severity vulnerability.
How do I fix CVE-2009-0577?
To fix CVE-2009-0577, you should apply the latest patches or updates provided by the vendor.
What software is affected by CVE-2009-0577?
CVE-2009-0577 affects the CUPS version 1.1.17 specifically.
Is CVE-2009-0577 exploitable remotely?
CVE-2009-0577 is not considered to be remotely exploitable.
What is the impact of CVE-2009-0577?
The impact of CVE-2009-0577 is primarily related to the inability of rpmbuild to apply certain patches, leading to potential software integrity issues.