Bug 473901 (CVE-2008-5183)

Summary:

CVE-2008-5183 cups: DoS (daemon crash) caused by the large number of subscriptions

Product:

[Other] Security Response

Reporter:

Jan Lieskovsky <jlieskov>

Component:

vulnerability

Assignee:

Red Hat Product Security <security-response-team>

Status:

CLOSED ERRATA

QA Contact:

Severity:

medium

Docs Contact:

Priority:

medium

Version:

unspecified

CC:

kreilly, twaugh

Target Milestone:

---

Keywords:

Security

Target Release:

---

Hardware:

All

OS:

Linux

Whiteboard:

Fixed In Version:

Doc Type:

Bug Fix

Doc Text:

Story Points:

---

Clone Of:

Environment:

Last Closed:

2010-03-29 08:40:07 UTC

Type:

---

Regression:

---

Mount Type:

---

Documentation:

---

CRM:

Verified Versions:

Category:

---

oVirt Team:

---

RHEL 7.3 requirements from Atomic Host:

Cloudforms Team:

---

Target Upstream Version:

Embargoed:

Bug Depends On:

473909, 474355

Bug Blocks:

Attachments:

Description	Flags
cups-1.3-max-subscriptions.patch (CVE-2008-5183)	none

Comment 3 Jan Lieskovsky 2008-12-01 13:03:13 UTC

Common Vulnerabilities and Exposures assigned an identifier CVE-2008-5183 to
the following vulnerability:

cupsd in CUPS before 1.3.8 allows local users, and possibly remote
attackers, to cause a denial of service (daemon crash) by adding a
large number of RSS Subscriptions, which triggers a NULL pointer
dereference.  NOTE: this issue can be triggered remotely by leveraging
CVE-2008-5184.

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5183
http://www.gnucitizen.org/blog/pwning-ubuntu-via-cups/
https://bugs.launchpad.net/ubuntu/+source/cups/+bug/298241
http://www.openwall.com/lists/oss-security/2008/11/19/3
http://www.openwall.com/lists/oss-security/2008/11/19/4

Patch: See attachment -- cups-1.3-max-subscriptions.patch

Comment 4 Fedora Update System 2008-12-03 13:03:29 UTC

cups-1.3.9-4.fc10 has been submitted as an update for Fedora 10.
http://admin.fedoraproject.org/updates/cups-1.3.9-4.fc10

Comment 5 Fedora Update System 2008-12-03 13:05:29 UTC

cups-1.3.9-2.fc9 has been submitted as an update for Fedora 9.
http://admin.fedoraproject.org/updates/cups-1.3.9-2.fc9

Comment 6 Fedora Update System 2008-12-03 13:19:04 UTC

cups-1.3.9-2.fc8 has been submitted as an update for Fedora 8.
http://admin.fedoraproject.org/updates/cups-1.3.9-2.fc8

Comment 9 Fedora Update System 2008-12-09 11:33:00 UTC

cups-1.3.9-4.fc10 has been pushed to the Fedora 10 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 10 Fedora Update System 2008-12-09 11:35:46 UTC

cups-1.3.9-2.fc9 has been pushed to the Fedora 9 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 11 Fedora Update System 2008-12-09 11:38:24 UTC

cups-1.3.9-2.fc8 has been pushed to the Fedora 8 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 12 Tomas Hoger 2010-03-29 08:40:07 UTC

https://www.redhat.com/security/data/cve/CVE-2008-5183.html

Comment 13 Vincent Danen 2010-12-24 02:14:14 UTC

This was addressed via:

Red Hat Enterprise Linux version 5 (RHSA-2008:1029)