CVE search results

61 – 70 of 135 results

Detailed view

Sort by:

CVE-2011-2896

Medium priority

Some fixes available 8 of 39

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function...

4 affected packages

cups, cupsys, gimp, swi-prolog

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
cups	Not affected	Not affected	Not affected	Not affected
cupsys	Not in release	Not in release	Not in release	Not in release
gimp	Not affected	Not affected	Not affected	Not affected
swi-prolog	Vulnerable	Vulnerable	Vulnerable	Vulnerable

CVE-2010-2941

Medium priority

Fixed

ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or...

2 affected packages

cups, cupsys

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
cups	—	—	—	—
cupsys	—	—	—	—

CVE-2010-2432

Low priority

Ignored

The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service...

2 affected packages

cups, cupsys

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
cups	—	—	—	—
cupsys	—	—	—	—

CVE-2010-2431

Low priority

Fixed

The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.

2 affected packages

cups, cupsys

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
cups	—	—	—	—
cupsys	—	—	—	—

CVE-2010-1748

Medium priority

Fixed

The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter...

2 affected packages

cups, cupsys

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
cups	—	—	—	—
cupsys	—	—	—	—

CVE-2010-0542

Medium priority

Fixed

The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL...

2 affected packages

cups, cupsys

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
cups	—	—	—	—
cupsys	—	—	—	—

CVE-2010-0540

Medium priority

Fixed

Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of...

2 affected packages

cups, cupsys

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
cups	—	—	—	—
cupsys	—	—	—	—

CVE-2010-0393

Medium priority

Fixed

The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain...

2 affected packages

cups, cupsys

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
cups	—	—	—	—
cupsys	—	—	—	—

CVE-2010-0302

Medium priority

Fixed

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote...

2 affected packages

cups, cupsys

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
cups	—	—	—	—
cupsys	—	—	—	—

CVE-2009-3553

Medium priority

Fixed

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of...

2 affected packages

cups, cupsys

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
cups	—	—	—	—
cupsys	—	—	—	—

Export to JSON

Results by page:

Search CVE reports