Skip to content
OpenAdvisories
Unscored DSA-2176-1 8 CVEs

cups - several

Published Mar 2, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 cups 1.3.8-1+lenny9

Vulnerabilities 8

  • Unscored —
    CVE-2008-5183 Public exploit

    cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon…

    cups Debian
  • Unscored —
    CVE-2009-3553

    Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in schedu…

    cups Debian
  • Unscored —
    CVE-2010-0540

    Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10…

    cups Debian
  • Unscored —
    CVE-2010-0542

    The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check th…

    cups Debian
  • Unscored —
    CVE-2010-1748 Public exploit

    The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS …

    cups Debian
  • Unscored —
    CVE-2010-2431

    The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary fil…

    cups Debian
  • Unscored —
    CVE-2010-2432

    The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not p…

    cups Debian
  • Unscored —
    CVE-2010-2941

    ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string dat…

    cups Debian