The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade cups-libsUpgrade cups-develUpgrade cups-lpdUpgrade cups | Dec 1, 2016 | Jun 21, 2010 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Jun 21, 2010 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Jun 21, 2010 |
| Oracle_linux | — | Upgrade cups-libsUpgrade cups-develUpgrade cupsUpgrade cups-lpd | Oct 16, 2024 | Jun 21, 2010 |
| Suse | — | Upgrade libcupsppdc1Upgrade cups-libs-x86Upgrade cups-libs-32bitUpgrade cups154-filtersUpgrade libcups2Upgrade cups-ddkUpgrade cupsUpgrade cups154-libsUpgrade cups-develUpgrade libcupsimage2Upgrade cups-configUpgrade cups154-clientUpgrade cups-libsUpgrade libcupscgi1Upgrade cups154Upgrade libcups2-32bitUpgrade cups-clientUpgrade libcupsmime1 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade cupsysUpgrade cups | Nov 8, 2024 | Jun 21, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub