CVE

Id
42886  
CVE No.
CVE-2010-0302  
Status
Candidate  
Description
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3553.  
Phase
Assigned (20100112)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
467718 42886 CVE-2010-0302 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=557775  View
467719 42886 CVE-2010-0302 CONFIRM:http://support.apple.com/kb/HT4188  View
467720 42886 CVE-2010-0302 CONFIRM:http://cups.org/str.php?L3490  View
467721 42886 CVE-2010-0302 CONFIRM:http://cups.org/articles.php?L596  View
467722 42886 CVE-2010-0302 APPLE:APPLE-SA-2010-06-15-1  View
467723 42886 CVE-2010-0302 URL:http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html  View
467724 42886 CVE-2010-0302 FEDORA:FEDORA-2010-2743  View
467725 42886 CVE-2010-0302 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037174.html  View
467726 42886 CVE-2010-0302 GENTOO:GLSA-201207-10  View
467727 42886 CVE-2010-0302 URL:http://security.gentoo.org/glsa/glsa-201207-10.xml  View
467728 42886 CVE-2010-0302 MANDRIVA:MDVSA-2010:073  View
467729 42886 CVE-2010-0302 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:073  View
467730 42886 CVE-2010-0302 REDHAT:RHSA-2010:0129  View
467731 42886 CVE-2010-0302 URL:https://rhn.redhat.com/errata/RHSA-2010-0129.html  View
467732 42886 CVE-2010-0302 UBUNTU:USN-906-1  View
467733 42886 CVE-2010-0302 URL:http://www.ubuntu.com/usn/USN-906-1  View
467734 42886 CVE-2010-0302 BID:38510  View
467735 42886 CVE-2010-0302 URL:http://www.securityfocus.com/bid/38510  View
467736 42886 CVE-2010-0302 OVAL:oval:org.mitre.oval:def:11216  View
467737 42886 CVE-2010-0302 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11216  View
467738 42886 CVE-2010-0302 SECTRACK:1024124  View
467739 42886 CVE-2010-0302 URL:http://www.securitytracker.com/id?1024124  View
467740 42886 CVE-2010-0302 SECUNIA:38927  View
467741 42886 CVE-2010-0302 URL:http://secunia.com/advisories/38927  View
467742 42886 CVE-2010-0302 SECUNIA:38979  View
467743 42886 CVE-2010-0302 URL:http://secunia.com/advisories/38979  View
467744 42886 CVE-2010-0302 SECUNIA:38785  View
467745 42886 CVE-2010-0302 URL:http://secunia.com/advisories/38785  View
467746 42886 CVE-2010-0302 SECUNIA:40220  View
467747 42886 CVE-2010-0302 URL:http://secunia.com/advisories/40220  View
467748 42886 CVE-2010-0302 VUPEN:ADV-2010-1481  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35337 JVNDB-2010-001117 KVM の x86 エミュレータにおける権限昇格の脆弱性 KVM の x86 エミュレータには、命令実行を制限する際に Current Privilege Level (CPL) および I/O Privilege Level (IOPL) を使用しないため、サービス運用妨害 (DoS) 状態となる、またはゲスト OS 上で権限を取得される脆弱性が存在します。 CVE-2010-0306 42886 4.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001117.html  View