Search for vulnerabilities
Vulnerability ID | VCID-qr1m-82jb-aaad |
Aliases |
CVE-2008-5183
|
Summary | cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184. |
Status | Published |
Exploitability | 2.0 |
Weighted Severity | 6.8 |
Risk | 10.0 |
Affected and Fixed Packages | Package Details |
CWE-399 | Resource Management Errors |
CWE-476 | NULL Pointer Dereference |
Data source | Exploit-DB |
---|---|
Date added | Nov. 17, 2008 |
Description | CUPS 1.3.7 - Cross-Site Request Forgery (Add RSS Subscription) Remote Crash |
Ransomware campaign use | Known |
Source publication date | Nov. 18, 2008 |
Exploit type | dos |
Platform | linux |
Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
Percentile | 0.81928 |
EPSS Score | 0.01973 |
Published At | March 28, 2025, 12:55 p.m. |
Date | Actor | Action | Source | VulnerableCode Version |
---|---|---|---|---|
There are no relevant records. |