Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Desktop | Redhat | 3.0 (including) | 3.0 (including) |
| Desktop | Redhat | 4.0 (including) | 4.0 (including) |
| Enterprise_linux | Redhat | as_3 (including) | as_3 (including) |
| Enterprise_linux | Redhat | as_4 (including) | as_4 (including) |
| Enterprise_linux | Redhat | es_3 (including) | es_3 (including) |
| Enterprise_linux | Redhat | es_4 (including) | es_4 (including) |
| Enterprise_linux | Redhat | ws_3 (including) | ws_3 (including) |
| Enterprise_linux | Redhat | ws_4 (including) | ws_4 (including) |
| Red Hat Enterprise Linux 3 | RedHat | cups-1:1.1.17-13.3.51 | * |
| Red Hat Enterprise Linux 4 | RedHat | cups-1:1.1.22-0.rc1.9.20.2.el4_6.5 | * |
| Cupsys | Ubuntu | upstream | * |