CVE-2002-1368
NoneCVSS
—
EPSS
15.5%
Published
Dec 26, 2002
CISA due date
—
The record
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | cups | 0 | 1.1.18-1 |
| Debian:12 | cups | 0 | 1.1.18-1 |
| Debian:13 | cups | 0 | 1.1.18-1 |
| Debian:3.0 | cupsys | 0 | 1.1.14-4.3 |
Related vulnerabilities
- CVE-2024-47176 CUPS is a standards-based, open-source printing system, and `cups-browsed` contains… Also affects cups
- CVE-2024-47076 CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the… Also affects cups
- CVE-2024-47175 CUPS is a standards-based, open-source printing system, and `libppd` can be used for… Also affects cups
- CVE-2015-1158 The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect… Also affects cups
- CVE-2011-2896 The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF… Also affects cups
- CVE-2009-0949 The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly… Also affects cups
- CVE-2008-3641 The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote… Also affects cups
- CVE-2007-5849 Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c)… Also affects cups