REDHAT-BUG-497135: Medium severity cups vulnerability

Published Apr 22, 2009

Updated

Swen van Brussel reported pointer use-after-delete flaw, present in the CUPS directory services routine, processing new data about available printers and printer classes. A remote attacker could suspend, and after a carefully-chosen time interval renew sending of CUPS browse packets to the victim machine with running cupsd daemon, leading to a denial of service (cupsd daemon stop or crash).

Acknowledgements:

Red Hat would like to thank Swen van Brussel for reporting this issue.

Affected Software

1 affected component

apple CUPS

Event History

Apr 22, 2009

Data Sourced

via Red Hat·01:48 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-497135?

The severity of REDHAT-BUG-497135 is classified as high due to the potential for remote code execution.

How do I fix REDHAT-BUG-497135?

To fix REDHAT-BUG-497135, update your Apple CUPS installation to the latest version that addresses this vulnerability.

What systems are affected by REDHAT-BUG-497135?

The systems affected by REDHAT-BUG-497135 include those running Apple CUPS.

What type of vulnerability is REDHAT-BUG-497135?

REDHAT-BUG-497135 is identified as a pointer use-after-delete flaw.

Can REDHAT-BUG-497135 be exploited remotely?

Yes, REDHAT-BUG-497135 can be exploited remotely by an attacker to disrupt services.