CVE-2007-5849
NoneCVSS
—
EPSS
13.6%
Published
Dec 19, 2007
CISA due date
—
The record
Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | cups | 0 | 1.3.5-1 |
| Debian:11 | cups | 0 | 1.3.5-1 |
| Debian:12 | cups | 0 | 1.3.5-1 |
| Debian:13 | cups | 0 | 1.3.5-1 |
| Debian:4.0 | cupsys | 0 | 1.2.7-4etch2 |
Related vulnerabilities
- CVE-2023-32360 An authentication issue was addressed with improved state management. Also affects cups
- CVE-2008-3641 The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote… Also affects cups
- CVE-2024-47176 CUPS is a standards-based, open-source printing system, and `cups-browsed` contains… Also affects cups
- CVE-2024-47076 CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the… Also affects cups
- CVE-2024-47175 CUPS is a standards-based, open-source printing system, and `libppd` can be used for… Also affects cups
- CVE-2024-47177 CUPS is a standards-based, open-source printing system, and cups-filters provides… Also affects cups
- CVE-2019-2228 In array_find of array.c, there is a possible out-of-bounds read due to an incorrect… Also affects cups
- CVE-2015-3258 Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf… Also affects cups