CVE-2008-5183: apple cups NULL Pointer Dereference

EPSS trend

Probability

9.21%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 9.21% on 18-09-2026

18-09-202618-10-2026

EPSS score

9.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoslinuxVerified
CUPS 1.3.7 - Cross-Site Request Forgery (Add RSS Subscription) Remote Crash
Maturity: poc

References

29 links

www.exploit-db.com/exploits/7150ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
secunia.com/advisories/33937Third Party AdvisoryX Refsource SECUNIABroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10586VDB EntrySignatureX Refsource OVALBroken Link
www.openwall.com/lists/oss-security/2008/11/20/1Mailing ListX Refsource MLIST
www.openwall.com/lists/oss-security/2008/11/19/3Mailing ListX Refsource MLIST
www.openwall.com/lists/oss-security/2008/11/19/4Mailing ListX Refsource MLIST
support.apple.com/kb/HT3438X Refsource CONFIRMThird Party Advisory
lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing List
www.debian.org/security/2011/dsa-2176Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.securitytracker.com/id?1021396VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory

Show all 29 references

www.gnucitizen.org/blog/pwning-ubuntu-via-cups/X Refsource MISCBroken Link
www.vupen.com/english/advisories/2011/0535VDB EntryX Refsource VUPENBroken Link
www.vupen.com/english/advisories/2009/0422VDB EntryX Refsource VUPENBroken Link
www.securityfocus.com/bid/32419VDB EntryX Refsource BIDBroken LinkThird Party Advisory
www.redhat.com/support/errata/RHSA-2008-1029.htmlVendor AdvisoryX Refsource REDHATBroken Link
secunia.com/advisories/43521Third Party AdvisoryX Refsource SECUNIABroken Link
lab.gnucitizen.org/projects/cups-0dayX Refsource MISCBroken Link
exchange.xforce.ibmcloud.com/vulnerabilities/46684VDB EntryX Refsource XFThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.htmlVendor AdvisoryX Refsource SUSEMailing List
www.mandriva.com/security/advisories?name=MDVSA-2009:028Vendor AdvisoryX Refsource MANDRIVABroken Link
bugs.launchpad.net/ubuntu/+source/cups/+bug/298241X Refsource CONFIRMIssue Tracking
access.redhat.com/errata/RHSA-2008:1029Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=473901REPORT
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1029.jsonAdvisory
access.redhat.com/security/cve/CVE-2008-5183REPORT
www.cve.org/CVERecord?id=CVE-2008-5183Advisory
nvd.nist.gov/vuln/detail/CVE-2008-5183Advisory
security-tracker.debian.org/tracker/CVE-2008-5183Advisory

Related vulnerabilities

CVE-2018-20505appleicloud+76.89%7y ago03-04-2019 17:51SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).CVE-2018-4090appleapple_tv+33.62%8y ago03-04-2018 06:00An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.CVE-2018-4467applemac_os_x+10.78%5y ago27-10-2020 19:21A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra. A malicious application may be able to elevate privileges.CVE-2018-4391appleiphone_os+30.87%5y ago27-10-2020 19:19An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, watchOS 4.3, iOS 12.1. Processing a maliciously crafted text message may lead to UI spoofing.CVE-2018-4236applemac_os_x1.18%8y ago08-06-2018 18:00An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOGraphics" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.CVE-2018-4194appleicloud+41.93%7y ago11-01-2019 18:00In iOS before 11.4, iCloud for Windows before 7.5, watchOS before 4.3.1, iTunes before 12.7.5 for Windows, and macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.

All vulnerabilities incups mac_os_x mac_os_x_server debian_linux opensuse

CVE-2008-5183: apple cups NULL Pointer Dereference

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References