CVE-2008-5183

HIGH 7.5CVE-2008-5183 · Published 21/11/2008 · updated 16/06/2026

In short

CVE-2008-5183 is a HIGH (CVSS 7.5) vulnerability affecting cups (apple).
Chance of exploitation in the next 30 days (EPSS): 9.2%, higher than 95.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cups apple	`≤ 1.3.9`	No fix yet

Description

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.

References

lab.gnucitizen.org/projects/cups-0day · Broken Link
lists.apple.com/archives/security-announce/2009/Feb/msg00000.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html · Mailing List
secunia.com/advisories/33937 · Broken Link
secunia.com/advisories/43521 · Broken Link
support.apple.com/kb/HT3438 · Third Party Advisory
debian.org/security/2011/dsa-2176 · Third Party Advisory
gnucitizen.org/blog/pwning-ubuntu-via-cups · Broken Link
mandriva.com/security/advisories · Broken Link
openwall.com/lists/oss-security/2008/11/19/3 · Mailing List
openwall.com/lists/oss-security/2008/11/19/4 · Mailing List
openwall.com/lists/oss-security/2008/11/20/1

More vulnerabilities in cups

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cups

apple

≤ 1.3.9

No fix yet

More vulnerabilities in cups

See all →