{"schemaVersion":3,"id":"CVE-2009-3553","aliases":["DEBIAN-CVE-2009-3553"],"status":"published","duplicateOf":null,"title":null,"description":"Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count.  NOTE: some of these details are obtained from third party information.","dates":{"published":"2009-11-20T02:00:00.000Z","modified":"2024-08-07T06:31:10.475Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":0.03913,"percentile":0.90183,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.03913},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03913,"percentile":0.90183}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03913,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03913,"percentile":0.90183}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-416","name":"Use After Free","description":"The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","type":"weakness","status":"Stable","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/416.html"}],"affected":[{"vendor":"apple","product":"cups","name":"cups","label":"cups","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.3.7","noFixRecorded":false,"fixedIn":null},{"text":"1.3.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.3.7 | 1.3.10","eol":null,"hubHref":"/vendor/apple/cups"},{"vendor":"apple","product":"mac_os_x","name":"mac os x","label":"mac_os_x","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 10.5.8","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.6.0, < 10.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.5.8 | ≥ 10.6.0, < 10.6.2","eol":null,"hubHref":"/vendor/apple/mac_os_x"},{"vendor":"apple","product":"mac_os_x_server","name":"mac os x server","label":"mac_os_x_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 10.5.8","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.6.0, < 10.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.5.8 | ≥ 10.6.0, < 10.6.2","eol":null,"hubHref":"/vendor/apple/mac_os_x_server"},{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.06","noFixRecorded":false,"fixedIn":null},{"text":"8.04","noFixRecorded":false,"fixedIn":null},{"text":"8.10","noFixRecorded":false,"fixedIn":null},{"text":"9.04","noFixRecorded":false,"fixedIn":null},{"text":"9.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.06 | 8.04 | 8.10 | 9.04 | 9.10","eol":{"isEol":true,"eolDate":"2011-06-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"6.06","label":"6.06 'Dapper Drake' (LTS)","eolFrom":"2011-06-01T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"6.06.2"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"cups","name":"cups","label":"cups","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/cups","purlType":"deb","versions":[{"text":"< 1.4.2-4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.2-4","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0","eol":{"isEol":true,"eolDate":"2012-02-06T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"5","label":"5 (Lenny)","eolFrom":"2012-02-06T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"5.0.10"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10","noFixRecorded":false,"fixedIn":null}],"versionsText":"10","eol":{"isEol":true,"eolDate":"2009-12-17T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"10","label":"10 (Cambridge)","eolFrom":"2009-12-17T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"redhat","product":"enterprise_linux","name":"enterprise linux","label":"enterprise_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0","eol":{"isEol":true,"eolDate":"2017-03-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"5","label":"5 (ELS)","eolFrom":"2017-03-31T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"5.11"},"product":{"name":"rhel","label":"Red Hat Enterprise Linux","category":"os"}},"hubHref":"/vendor/redhat/enterprise_linux"}],"affectedCount":8,"eol":{"hasEol":true,"count":4},"references":[{"url":"http://secunia.com/advisories/37364","label":"secunia.com/advisories/37364","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11183","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11183","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-906-1","label":"www.ubuntu.com/usn/USN-906-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1595.html","label":"www.redhat.com/support/errata/RHSA-2009-1595.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Broken Link"]},{"url":"http://www.securityfocus.com/bid/37048","label":"www.securityfocus.com/bid/37048","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4004","label":"support.apple.com/kb/HT4004","hostname":"support.apple.com","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2176","label":"www.debian.org/security/2011/dsa-2176","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Mailing List"]},{"url":"http://www.cups.org/newsgroups.php/newsgroups.php?v5996+gcups.bugs","label":"www.cups.org/newsgroups.php/newsgroups.php?v5996+gcups.bugs","hostname":"www.cups.org","tags":["X Refsource MISC","Broken Link","Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","label":"lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE","Mailing List"]},{"url":"http://security.gentoo.org/glsa/glsa-201207-10.xml","label":"security.gentoo.org/glsa/glsa-201207-10.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0535","label":"www.vupen.com/english/advisories/2011/0535","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"http://secunia.com/advisories/37360","label":"secunia.com/advisories/37360","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:073","label":"www.mandriva.com/security/advisories?name=MDVSA-2010:073","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Broken Link"]},{"url":"http://www.cups.org/str.php?L3200","label":"www.cups.org/str.php?L3200","hostname":"www.cups.org","tags":["X Refsource MISC","Broken Link","Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530111","label":"bugzilla.redhat.com/show_bug.cgi?id=530111","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","Issue Tracking"]},{"url":"http://www.cups.org/newsgroups.php/newsgroups.php?v5994+gcups.bugs","label":"www.cups.org/newsgroups.php/newsgroups.php?v5994+gcups.bugs","hostname":"www.cups.org","tags":["X Refsource MISC","Broken Link","Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00332.html","label":"www.redhat.com/archives/fedora-package-announce/2009-December/msg00332.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List"]},{"url":"http://secunia.com/advisories/43521","label":"secunia.com/advisories/43521","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://secunia.com/advisories/38241","label":"secunia.com/advisories/38241","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.cups.org/newsgroups.php/newsgroups.php?v6055+gcups.bugs","label":"www.cups.org/newsgroups.php/newsgroups.php?v6055+gcups.bugs","hostname":"www.cups.org","tags":["X Refsource MISC","Broken Link","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-275230-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-66-275230-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","label":"www.vupen.com/english/advisories/2010/0173","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2009-3553","label":"security-tracker.debian.org/tracker/CVE-2009-3553","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-2176-1","OPENSUSE-SU-2024:10075-1","RHSA-2009:1595"],"duplicates":[],"related":["OPENSUSE-SU-2024:10075-1"]},"timeline":[{"kind":"published","date":"2009-11-20T02:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T06:31:10.475Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:01:28.169Z","stale":false,"partial":false}}