CVE-2008-5183
published 2008-11-21CVE-2008-5183: cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS…
PriorityP343high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EXPLOIT
EPSS
9.21%
94.8th percentile
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | cups | <= 1.3.9 | — |
| apple | cups | >= 0 < 1.3.9-13 | 1.3.9-13 |
| apple | cups | >= 0 < 1.3.9-13 | 1.3.9-13 |
| apple | cups | >= 0 < 1.3.9-13 | 1.3.9-13 |
| apple | cups | >= 0 < 1.3.9-13 | 1.3.9-13 |
| apple | mac_os_x | < 10.5.6 | 10.5.6 |
| apple | mac_os_x_server | < 10.5.6 | 10.5.6 |
| debian | cups | < cups 1.3.9-13 (bookworm) | cups 1.3.9-13 (bookworm) |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| opensuse | opensuse | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5LOW
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
CUPS vulnerabilities
vendor_ubuntu·2009-01-12·CVSS 7.5
CVE-2008-5183 [HIGH] CUPS vulnerabilities
Title: CUPS vulnerabilities
Summary: CUPS vulnerabilities
It was discovered that CUPS didn't properly handle adding a large number of RSS
subscriptions. A local user could exploit this and cause CUPS to crash, leading
to a denial of service. This issue only applied to Ubuntu 7.10, 8.04 LTS and
8.10. (CVE-2008-5183)
It was discovered that CUPS did not authenticate users when adding and
cancelling RSS subscriptions. An unprivileged local user could bypass intended
restrictions and add a large number of RSS subscriptions. This issue only
applied to Ubuntu 7.10 and 8.04 LTS. (CVE-2008-5184)
It was discovered that the PNG filter in CUPS did not properly handle certain
malformed images. If a user or automated system were tricked into opening a
crafted PNG image file, a remote attacker could
Red Hat
cups: DoS (daemon crash) caused by the large number of subscriptions
vendor_redhat·2008-11-15·CVSS 7.5
CVE-2008-5183 [HIGH] cups: DoS (daemon crash) caused by the large number of subscriptions
cups: DoS (daemon crash) caused by the large number of subscriptions
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.
Debian
CVE-2008-5183: cups - cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attacker...
vendor_debian·2008·CVSS 7.5
CVE-2008-5183 [HIGH] CVE-2008-5183: cups - cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attacker...
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.
Scope: local
bookworm: resolved (fixed in 1.3.9-13)
bullseye: resolved (fixed in 1.3.9-13)
forky: resolved (fixed in 1.3.9-13)
sid: resolved (fixed in 1.3.9-13)
trixie: resolved (fixed in 1.3.9-13)
GHSA
GHSA-9pqm-v858-jg26: cupsd in CUPS 1
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2008-5183 [CRITICAL] CWE-476 GHSA-9pqm-v858-jg26: cupsd in CUPS 1
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.
OSV
CVE-2008-5183: cupsd in CUPS 1
osv·2008-11-21·CVSS 7.5
CVE-2008-5183 [HIGH] CVE-2008-5183: cupsd in CUPS 1
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.
No detection rules found.
CWE
Unchecked Return Value to NULL Pointer Dereference
mitre_cwe
CWE-690 Unchecked Return Value to NULL Pointer Dereference
CWE-690: Unchecked Return Value to NULL Pointer Dereference
The product does not check for an error after calling a function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference.
While unchecked return value weaknesses are not limited to returns of NULL pointers (see the examples in CWE-252), functions often return NULL to indicate an error status. When this error condition is not checked, a NULL pointer dereference can occur.
Modes of Introduction:
Phase: Implementation
Note: A typical occurrence of this weakness occurs when an application includes user-controlled input to a malloc() call. The related code might be correct with respect to preventing buffer overflows, but if a large value is provided, the malloc() will fail due t
CWE
Unchecked Return Value
mitre_cwe
CWE-252 Unchecked Return Value
CWE-252: Unchecked Return Value
The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
Two common programmer assumptions are "this function call can never fail" and "it doesn't matter if this function call fails". If an attacker can force the function to fail or otherwise return a value that is not expected, then the subsequent program logic could lead to a vulnerability, because the product is not in a state that the programmer assumes. For example, if the program calls a function to drop privileges but does not check the return code to ensure that privileges were successfully dropped, then the program will continue to operate with the higher privileges.
Background: Many functions will return some val
CWE
NULL Pointer Dereference
mitre_cwe
CWE-476 NULL Pointer Dereference
CWE-476: NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Modes of Introduction:
Phase: Implementation
Common Consequences:
Scope: Availability. Impact: DoS: Crash, Exit, or Restart. NULL pointer dereferences usually result in the failure of the process unless exception handling (on some platforms) is available and implemented. Even when exception handling is being used, it can still be very difficult to return the software to a safe state of operation.
Scope: Integrity, Confidentiality. Impact: Execute Unauthorized Code or Commands, Read Memory, Modify Memory. In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code ex
http://lab.gnucitizen.org/projects/cups-0dayhttp://lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.htmlhttp://secunia.com/advisories/33937http://secunia.com/advisories/43521http://support.apple.com/kb/HT3438http://www.debian.org/security/2011/dsa-2176http://www.gnucitizen.org/blog/pwning-ubuntu-via-cups/http://www.mandriva.com/security/advisories?name=MDVSA-2009:028http://www.openwall.com/lists/oss-security/2008/11/19/3http://www.openwall.com/lists/oss-security/2008/11/19/4http://www.openwall.com/lists/oss-security/2008/11/20/1http://www.redhat.com/support/errata/RHSA-2008-1029.htmlhttp://www.securityfocus.com/bid/32419http://www.securitytracker.com/id?1021396http://www.vupen.com/english/advisories/2009/0422http://www.vupen.com/english/advisories/2011/0535https://bugs.launchpad.net/ubuntu/+source/cups/+bug/298241https://exchange.xforce.ibmcloud.com/vulnerabilities/46684https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10586https://www.exploit-db.com/exploits/7150http://lab.gnucitizen.org/projects/cups-0dayhttp://lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.htmlhttp://secunia.com/advisories/33937http://secunia.com/advisories/43521http://support.apple.com/kb/HT3438http://www.debian.org/security/2011/dsa-2176http://www.gnucitizen.org/blog/pwning-ubuntu-via-cups/http://www.mandriva.com/security/advisories?name=MDVSA-2009:028http://www.openwall.com/lists/oss-security/2008/11/19/3http://www.openwall.com/lists/oss-security/2008/11/19/4http://www.openwall.com/lists/oss-security/2008/11/20/1http://www.redhat.com/support/errata/RHSA-2008-1029.htmlhttp://www.securityfocus.com/bid/32419http://www.securitytracker.com/id?1021396http://www.vupen.com/english/advisories/2009/0422http://www.vupen.com/english/advisories/2011/0535https://bugs.launchpad.net/ubuntu/+source/cups/+bug/298241https://exchange.xforce.ibmcloud.com/vulnerabilities/46684https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10586https://www.exploit-db.com/exploits/7150
2008-11-21
Published