Description
Unknown vulnerability in the Internet Printing Protocol (IPP) implementation in CUPS before 1.1.19 allows remote attackers to cause a denial of service (CPU consumption from a "busy loop") via certain inputs to the IPP port (TCP 631).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | cups | 1.1.19 | — |
| Debian 13 | cups | 1.1.19 | — |
| Debian 12 | cups | 1.1.19 | — |
References
- 8952 vdb-entry
- CLA-2003:788 vendor-advisory
- TLSA-2003-63 vendor-advisory
- RHSA-2003:275 vendor-advisory
- MDKSA-2003:104 vendor-advisory
- 10123 third-party-advisory
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=97958
- CLA-2003:779 vendor-advisory
- cups-ipp-dos(13584) vdb-entry