CVE-2010-2941: apple cups Use After Free

CVSS: 9.8v3.1CriticalModified

AliasesRHSA-2010:0866DEBIAN-CVE-2010-2941

Published 05-11-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-2941 is a critical (CVSS 9.8) Use After Free vulnerability in apple cups. EPSS estimates a 6.42% chance of exploitation in the next 30 days, higher than 93.6% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (NVD)

EPSS score

6.42%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3 · Related 1

DSA-2176-1 OPENSUSE-SU-2024:10075-1 RHSA-2010:0811

Timeline

05-11-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.

CVSS metrics

3 scores · 2 sources · 2 versions

v3.19.8v2.09.3

EPSS trend

Probability

6.42%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.42% on 18-09-2026

18-09-202618-10-2026

EPSS score

6.42%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Redhat10 products

Show all 10

Apple3 products

cups≤ 1.4.4
mac_os_x< 10.5.8 | ≥ 10.6.0, ≤ 10.6.4
mac_os_x_server< 10.5.8 | ≥ 10.6.0, ≤ 10.6.4

Debian2 products

cups< 1.4.4-7
debian_linuxEOL5.0

Suse2 products

linux_enterprise10.0:sp3 | 11.0 | 11.0:sp1
linux_enterprise_server9

Canonical1 product

ubuntu_linuxEOL6.06 | 8.04 | 9.10 | 10.04 | 10.10

Fedoraproject1 product

fedoraEOL12 | 13 | 14

Opensuse1 product

opensuseEOL11.1 | 11.2 | 11.3

7 vendors · 20 products

References

36 links

www.mandriva.com/security/advisories?name=MDVSA-2010:234Vendor AdvisoryX Refsource MANDRIVABroken Link
support.apple.com/kb/HT4435X Refsource CONFIRMBroken Link
www.vupen.com/english/advisories/2010/3042VDB EntryX Refsource VUPENBroken Link
rhn.redhat.com/errata/RHSA-2010-0811.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.redhat.com/support/errata/RHSA-2010-0866.htmlVendor AdvisoryX Refsource REDHATBroken Link
blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefoxX Refsource CONFIRMBroken Link
www.mandriva.com/security/advisories?name=MDVSA-2010:232Vendor AdvisoryX Refsource MANDRIVABroken Link
lists.fedoraproject.org/pipermail/package-announce/2010-November/051301.htmlVendor AdvisoryX Refsource FEDORAMailing List
lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing List
www.vupen.com/english/advisories/2010/2856VDB EntryX Refsource VUPENBroken LinkVendor Advisory

Show all 36 references

www.debian.org/security/2011/dsa-2176Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
securitytracker.com/id?1024662VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing List
secunia.com/advisories/42867Third Party AdvisoryX Refsource SECUNIABroken Link
security.gentoo.org/glsa/glsa-201207-10.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.vupen.com/english/advisories/2011/0061VDB EntryX Refsource VUPENBroken Link
lists.fedoraproject.org/pipermail/package-announce/2010-November/050977.htmlVendor AdvisoryX Refsource FEDORAMailing List
www.vupen.com/english/advisories/2011/0535VDB EntryX Refsource VUPENBroken Link
www.ubuntu.com/usn/USN-1012-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2010-November/051277.htmlVendor AdvisoryX Refsource FEDORAMailing List
www.mandriva.com/security/advisories?name=MDVSA-2010:233Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/42287Third Party AdvisoryX Refsource SECUNIABroken Link
bugzilla.redhat.com/show_bug.cgi?id=624438X Refsource CONFIRMIssue TrackingPatchREPORT
exchange.xforce.ibmcloud.com/vulnerabilities/62882VDB EntryX Refsource XFThird Party Advisory
secunia.com/advisories/43521Third Party AdvisoryX Refsource SECUNIABroken Link
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.468323Vendor AdvisoryX Refsource SLACKWAREBroken Link
www.osvdb.org/68951VDB EntryX Refsource OSVDBBroken Link
www.securityfocus.com/bid/44530VDB EntryX Refsource BIDBroken LinkThird Party Advisory
www.vupen.com/english/advisories/2010/3088VDB EntryX Refsource VUPENBroken Link
access.redhat.com/errata/RHSA-2010:0866Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0866.jsonAdvisory
access.redhat.com/security/cve/CVE-2010-2941REPORT
www.cve.org/CVERecord?id=CVE-2010-2941Advisory
nvd.nist.gov/vuln/detail/CVE-2010-2941Advisory
security-tracker.debian.org/tracker/CVE-2010-2941Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities