HIGH
cups: double free vulnerability in process_browse_data()
Published Feb 21, 2008
10.0
HIGHCVSS 2.0
EPSS 5.79%
Description
Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation of a remote printer. NOTE: some of these details are obtained from third party information.
Affected products
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
10.0 HIGH NVD
AV:N/AC:L/Au:N/C:C/I:C/A:C
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Complete
Integrity Impact Complete
Availability Impact Complete
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
5.79% 0.05793
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.05793
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (15 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 5.79% (0.05793) | 92.88th | v5 (v2026.06.15) |
| Jun 15, 2026 | 5.79% (0.05793) | 92.11th | v5 (v2026.06.15) |
| Mar 30, 2025 | 23.08% (0.23075) | 95.44th | v4 (v2025.03.14) |
| Mar 29, 2025 | 29.32% (0.29323) | 94.62th | v4 (v2025.03.14) |
| Mar 19, 2025 | 23.08% (0.23075) | 95.23th | v4 (v2025.03.14) |
| Mar 17, 2025 | 17.02% (0.17017) | 94.48th | v4 (v2025.03.14) |
| Feb 1, 2025 | 16.22% (0.16216) | 95.99th | v3 (v2023.03.01) |
| Dec 17, 2024 | 17.57% (0.17570) | 96.10th | v3 (v2023.03.01) |
| Nov 17, 2024 | 19.88% (0.19881) | 96.47th | v3 (v2023.03.01) |
| Jul 25, 2024 | 20.93% (0.20933) | 96.46th | v3 (v2023.03.01) |
| Feb 27, 2024 | 12.29% (0.12293) | 95.23th | v3 (v2023.03.01) |
| Mar 7, 2023 | 11.96% (0.11958) | 94.40th | v3 (v2023.03.01) |
| Mar 6, 2023 | 8.23% (0.08228) | 93.49th | v2 (v2022.01.01) |
| Apr 1, 2022 | 8.23% (0.08228) | 92.89th | v2 (v2022.01.01) |
| Feb 4, 2022 | 8.23% (0.08228) | 82.23th | v2 (v2022.01.01) |
Weaknesses (1)
References (30)
- http://docs.info.apple.com/article.html?artnum=307562 x_refsource_CONFIRM
- http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html vendor-advisoryx_refsource_APPLE
- http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html vendor-advisoryx_refsource_SUSE
- http://secunia.com/advisories/28994 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/29067 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/29120 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/29132 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/29251 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/29420 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/29485 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/29603 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/29634 third-party-advisoryx_refsource_SECUNIA
- http://security.gentoo.org/glsa/glsa-200804-01.xml vendor-advisoryx_refsource_GENTOO
- http://www.cups.org/str.php?L2656 x_refsource_CONFIRM
- http://www.debian.org/security/2008/dsa-1530 vendor-advisoryx_refsource_DEBIAN
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:050 vendor-advisoryx_refsource_MANDRIVA
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:051 vendor-advisoryx_refsource_MANDRIVA
- http://www.redhat.com/support/errata/RHSA-2008-0157.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/bid/27906 vdb-entryx_refsource_BID
- http://www.securitytracker.com/id?1019473 vdb-entryx_refsource_SECTRACK
- http://www.ubuntu.com/usn/usn-598-1 vendor-advisoryx_refsource_UBUNTU
- http://www.vupen.com/english/advisories/2008/0623 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2008/0924/references vdb-entryx_refsource_VUPEN
- https://access.redhat.com/security/cve/CVE-2008-0882 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=433758 x_refsource_CONFIRMIssue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2008-0882
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9625 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2008-0882
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00792.html vendor-advisoryx_refsource_FEDORA
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00832.html vendor-advisoryx_refsource_FEDORA
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 21, 2008
Updated Aug 7, 2024
Reserved Feb 21, 2008
Link CVE-2008-0882
CISA Vulnrichment
Updated n/a