CVE-2010-0302

Published: Mar 5, 2010Modified: Apr 29, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3553.

Affected (16)

Products: Apple: Cups, Mac Os X, Mac Os X Server · Fedoraproject: Fedora · Canonical: Ubuntu Linux · +1 more

Show all products

Apple: Cups, Mac Os X, Mac Os X Server · Fedoraproject: Fedora · Canonical: Ubuntu Linux · Redhat: Enterprise Linux, Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Workstation

3 products

Mac Os X Server

1 product

1 product

5 products

Enterprise Linux

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Workstation

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Apple Cups	Before 1.4.4
Apple Mac Os X	Before 10.5.8
Apple Mac Os X	From 10.6.0 to 10.6.4
Apple Mac Os X Server	Before 10.5.8
Apple Mac Os X Server	From 10.6.0 to 10.6.4

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 11

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 8.10
Canonical Ubuntu Linux	Version 9.04
Canonical Ubuntu Linux	Version 9.10

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Eus	Version 5.4
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Workstation	Version 5.0

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (36)

http://cups.org/articles.php?L596

Source: secalert@redhat.com

Release Notes

http://cups.org/str.php?L3490

Source: secalert@redhat.com

Release Notes

http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html

Source: secalert@redhat.com

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037174.html

Source: secalert@redhat.com

Mailing List

http://secunia.com/advisories/38785

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/38927

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/38979

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/40220

Source: secalert@redhat.com

Broken Link

http://security.gentoo.org/glsa/glsa-201207-10.xml

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT4188

Source: secalert@redhat.com

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:073

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/bid/38510

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1024124

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-906-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2010/1481

Source: secalert@redhat.com

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=557775

Source: secalert@redhat.com

Issue TrackingPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11216

Source: secalert@redhat.com

Broken Link

https://rhn.redhat.com/errata/RHSA-2010-0129.html

Source: secalert@redhat.com

Third Party Advisory

http://cups.org/articles.php?L596

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

http://cups.org/str.php?L3490

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037174.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://secunia.com/advisories/38785

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/38927

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/38979

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/40220

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://security.gentoo.org/glsa/glsa-201207-10.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://support.apple.com/kb/HT4188

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:073

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/38510

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1024124

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-906-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.vupen.com/english/advisories/2010/1481

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=557775

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11216

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://rhn.redhat.com/errata/RHSA-2010-0129.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.