NVD

Id
11868  
Name
CVE-2010-0302  
Description
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3553.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-03-05  
Modified Date
2013-05-14  
Seq
2010-0302  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
65446 11868 CVE-2010-0302 http://cups.org/articles.php?L596  View
65447 11868 CVE-2010-0302 http://cups.org/str.php?L3490  View
65448 11868 CVE-2010-0302 APPLE-SA-2010-06-15-1  View
65449 11868 CVE-2010-0302 FEDORA-2010-2743  View
65450 11868 CVE-2010-0302 oval:org.mitre.oval:def:11216  View
65451 11868 CVE-2010-0302 GLSA-201207-10  View
65452 11868 CVE-2010-0302 http://support.apple.com/kb/HT4188  View
65453 11868 CVE-2010-0302 MDVSA-2010:073  View
65454 11868 CVE-2010-0302 38510  View
65455 11868 CVE-2010-0302 1024124  View
65456 11868 CVE-2010-0302 USN-906-1  View
65457 11868 CVE-2010-0302 ADV-2010-1481  View
65458 11868 CVE-2010-0302 https://bugzilla.redhat.com/show_bug.cgi?id=557775  View
65459 11868 CVE-2010-0302 RHSA-2010:0129  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35377 JVNDB-2010-001157 CUPS の cupsd におけるサービス運用妨害 (DoS) の脆弱性 CUPS の cupsd にあるスケジューラの cupsdDoSelect 関数には、kqueue または epoll が使用されている場合に、多数のプリントジョブ一覧表示をしている間のクライアント切断処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-0302 42882 CVE-2010-0302 11868 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001157.html 2010-03-03 2010-07-05 View