CVE-2008-1722: cups Improper Input Validation

EPSS trend

Probability

2.00%

Chance of exploitation in the next 30 days

Percentile

80%

Versus all other CVEs

30-day change

0.00 pp

From 2.00% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.00%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

33 links

secunia.com/advisories/31324Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30553Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/41832VDB EntryX Refsource XF
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8768VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/32292Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30190Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/29809Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-606-1Vendor AdvisoryX Refsource UBUNTU
www.securityfocus.com/bid/28781VDB EntryX Refsource BID
www.osvdb.org/44398VDB EntryX Refsource OSVDB

Show all 33 references

secunia.com/advisories/30078Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/29902Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2008-0498.htmlVendor AdvisoryX Refsource REDHAT
www.debian.org/security/2008/dsa-1625Vendor AdvisoryX Refsource DEBIAN
www.securitytracker.com/id?1019854VDB EntryX Refsource SECTRACK
www.redhat.com/archives/fedora-package-announce/2008-May/msg00068.htmlVendor AdvisoryX Refsource FEDORA
usn.ubuntu.com/656-1/Vendor AdvisoryX Refsource UBUNTU
www.mandriva.com/security/advisories?name=MDVSA-2008:170Vendor AdvisoryX Refsource MANDRIVA
www.gentoo.org/security/en/glsa/glsa-200804-23.xmlVendor AdvisoryX Refsource GENTOO
www.kb.cert.org/vuls/id/218395Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.redhat.com/archives/fedora-package-announce/2008-May/msg00081.htmlVendor AdvisoryX Refsource FEDORA
www.cups.org/str.php?L2790X Refsource CONFIRMPatch
www.vupen.com/english/advisories/2008/1226/referencesVDB EntryX Refsource VUPEN
www.novell.com/linux/security/advisories/2008_13_sr.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/30717Third Party AdvisoryX Refsource SECUNIA
access.redhat.com/errata/RHSA-2008:0498Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=441692REPORT
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0498.jsonAdvisory
access.redhat.com/security/cve/CVE-2008-1722REPORT
www.cve.org/CVERecord?id=CVE-2008-1722Advisory
nvd.nist.gov/vuln/detail/CVE-2008-1722Advisory
security-tracker.debian.org/tracker/CVE-2008-1722Advisory

Related vulnerabilities

CVE-2018-6553chainguardcups+160.39%8y ago10-08-2018 15:00The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS.CVE-2015-1158cupscups+229.73%11y ago26-06-2015 10:00The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.CVE-2015-1159cupscups+27.25%11y ago26-06-2015 10:00Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.CVE-2007-0720applemac_os_x+75.49%19y ago13-03-2007 21:00The CUPS service on multiple platforms allows remote attackers to cause a denial of service (service hang) via a "partially-negotiated" SSL connection, which prevents other requests from being accepted.CVE-2007-4351cupscups+77.38%18y ago31-10-2007 22:00Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow.CVE-2014-8166cupscups+13.70%8y ago12-01-2018 17:00The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbitrary code via a crafted printer name.

All vulnerabilities incups

CVE-2008-1722: cups Improper Input Validation

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References