CVE-2002-1368
NoneCVSS
—
EPSS
15.5%
Published
Dec 26, 2002
CISA due date
—
The record
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | cups | 0 | 1.1.18-1 |
| Debian:12 | cups | 0 | 1.1.18-1 |
| Debian:13 | cups | 0 | 1.1.18-1 |
| Debian:3.0 | cupsys | 0 | 1.1.14-4.3 |
Related vulnerabilities
- CVE-2024-47176 CUPS is a standards-based, open-source printing system, and `cups-browsed` contains… Also affects cups
- CVE-2024-47076 CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the… Also affects cups
- CVE-2024-47175 CUPS is a standards-based, open-source printing system, and `libppd` can be used for… Also affects cups
- CVE-2024-47177 CUPS is a standards-based, open-source printing system, and cups-filters provides… Also affects cups
- CVE-2023-32360 An authentication issue was addressed with improved state management. Also affects cups
- CVE-2019-2228 In array_find of array.c, there is a possible out-of-bounds read due to an incorrect… Also affects cups
- CVE-2015-3258 Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf… Also affects cups
- CVE-2015-1158 The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect… Also affects cups