{"schemaVersion":3,"id":"CVE-2010-0302","aliases":["RHSA-2010:0129","DEBIAN-CVE-2010-0302"],"status":"published","duplicateOf":null,"title":null,"description":"Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3553.","dates":{"published":"2010-03-05T19:00:00.000Z","modified":"2024-08-07T00:45:11.943Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":0.02583,"percentile":0.84993,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.02583},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02583,"percentile":0.84993}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02583,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02583,"percentile":0.84993}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-416","name":"Use After Free","description":"The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","type":"weakness","status":"Stable","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/416.html"}],"affected":[{"vendor":"apple","product":"cups","name":"cups","label":"cups","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.4.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.4","eol":null,"hubHref":"/vendor/apple/cups"},{"vendor":"apple","product":"mac_os_x","name":"mac os x","label":"mac_os_x","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 10.5.8","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.6.0, < 10.6.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.5.8 | ≥ 10.6.0, < 10.6.4","eol":null,"hubHref":"/vendor/apple/mac_os_x"},{"vendor":"apple","product":"mac_os_x_server","name":"mac os x server","label":"mac_os_x_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 10.5.8","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.6.0, < 10.6.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.5.8 | ≥ 10.6.0, < 10.6.4","eol":null,"hubHref":"/vendor/apple/mac_os_x_server"},{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.06","noFixRecorded":false,"fixedIn":null},{"text":"8.04","noFixRecorded":false,"fixedIn":null},{"text":"8.10","noFixRecorded":false,"fixedIn":null},{"text":"9.04","noFixRecorded":false,"fixedIn":null},{"text":"9.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.06 | 8.04 | 8.10 | 9.04 | 9.10","eol":{"isEol":true,"eolDate":"2011-06-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"6.06","label":"6.06 'Dapper Drake' (LTS)","eolFrom":"2011-06-01T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"6.06.2"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"cups","name":"cups","label":"cups","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/cups","purlType":"deb","versions":[{"text":"< 1.4.2-10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.2-10","eol":null,"hubHref":null},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11","noFixRecorded":false,"fixedIn":null}],"versionsText":"11","eol":{"isEol":true,"eolDate":"2010-06-25T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"11","label":"11 (Leonidas)","eolFrom":"2010-06-25T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"redhat","product":"enterprise_linux","name":"enterprise linux","label":"enterprise_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0","eol":{"isEol":true,"eolDate":"2017-03-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"5","label":"5 (ELS)","eolFrom":"2017-03-31T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"5.11"},"product":{"name":"rhel","label":"Red Hat Enterprise Linux","category":"os"}},"hubHref":"/vendor/redhat/enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus","name":"enterprise linux eus","label":"enterprise_linux_eus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.4","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"},{"vendor":"redhat","product":"cups","name":"cups","label":"cups","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups","purlType":"rpm","versions":[{"text":"< 1:1.3.7-11.el5_4.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.3.7-11.el5_4.6","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-debuginfo","name":"cups-debuginfo","label":"cups-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-debuginfo","purlType":"rpm","versions":[{"text":"< 1:1.3.7-11.el5_4.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.3.7-11.el5_4.6","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-devel","name":"cups-devel","label":"cups-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-devel","purlType":"rpm","versions":[{"text":"< 1:1.3.7-11.el5_4.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.3.7-11.el5_4.6","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-libs","name":"cups-libs","label":"cups-libs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-libs","purlType":"rpm","versions":[{"text":"< 1:1.3.7-11.el5_4.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.3.7-11.el5_4.6","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-lpd","name":"cups-lpd","label":"cups-lpd","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-lpd","purlType":"rpm","versions":[{"text":"< 1:1.3.7-11.el5_4.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.3.7-11.el5_4.6","eol":null,"hubHref":null}],"affectedCount":16,"eol":{"hasEol":true,"count":3},"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","label":"lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE","Mailing List"]},{"url":"http://www.ubuntu.com/usn/USN-906-1","label":"www.ubuntu.com/usn/USN-906-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=557775","label":"bugzilla.redhat.com/show_bug.cgi?id=557775","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","Issue Tracking","Patch","REPORT"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11216","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11216","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1481","label":"www.vupen.com/english/advisories/2010/1481","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"http://cups.org/articles.php?L596","label":"cups.org/articles.php?L596","hostname":"cups.org","tags":["X Refsource CONFIRM","Release Notes"]},{"url":"http://www.securitytracker.com/id?1024124","label":"www.securitytracker.com/id?1024124","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4188","label":"support.apple.com/kb/HT4188","hostname":"support.apple.com","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201207-10.xml","label":"security.gentoo.org/glsa/glsa-201207-10.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037174.html","label":"lists.fedoraproject.org/pipermail/package-announce/2010-March/037174.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List"]},{"url":"http://secunia.com/advisories/40220","label":"secunia.com/advisories/40220","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:073","label":"www.mandriva.com/security/advisories?name=MDVSA-2010:073","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Broken Link"]},{"url":"http://cups.org/str.php?L3490","label":"cups.org/str.php?L3490","hostname":"cups.org","tags":["X Refsource CONFIRM","Release Notes"]},{"url":"http://www.securityfocus.com/bid/38510","label":"www.securityfocus.com/bid/38510","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38785","label":"secunia.com/advisories/38785","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0129.html","label":"rhn.redhat.com/errata/RHSA-2010-0129.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38979","label":"secunia.com/advisories/38979","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://secunia.com/advisories/38927","label":"secunia.com/advisories/38927","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0129","label":"access.redhat.com/errata/RHSA-2010:0129","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0129.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0129.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0302","label":"access.redhat.com/security/cve/CVE-2010-0302","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0302","label":"www.cve.org/CVERecord?id=CVE-2010-0302","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0302","label":"nvd.nist.gov/vuln/detail/CVE-2010-0302","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-0302","label":"security-tracker.debian.org/tracker/CVE-2010-0302","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2010-03-05T19:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T00:45:11.943Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T10:13:11.545Z","stale":false,"partial":false}}