CVE-2008-0596
Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause...
Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a large number of requests to add and remove shared printers.
Exploit likelihood
What each source reports
NVD Score used
5.0
Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a large number of requests to add and remove shared printers.
- Record
CVE-2008-0596- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a large number of requests to add and remove shared printers.
- Record
CVE-2008-0596- Updated
- 2026-11-02
EUVDEUVD-2008-0606 No score
Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a large number of requests to add and remove shared printers.
- Record
EUVD-2008-0606- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8473-h2r9-j663 No score
Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause...
Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a large number of requests to add and remove shared printers.
- Record
GHSA-8473-h2r9-j663- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-libsRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cupsRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cupsRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
Show 22 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cups-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-libsRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cupsRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-libsRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cupsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-libsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cupsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cupsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-libsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cupsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-libsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0596 is a medium vulnerability (CVSS 5.0) in Easy Software Products Cups, published February 26, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.31%, the 83rd percentile. No source names a fixed version.
References
secunia.com/advisories/29251
secunia.com/advisories/29189
lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html
redhat.com/support/errata/RHSA-2008-0153.html
vupen.com/english/advisories/2008/0924/references
wiki.rpath.com/Advisories:rPSA-2008-0091
Show 30 moreShow less
wiki.rpath.com/wiki/Advisories:rPSA-2008-0091
secunia.com/advisories/29420
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
mandriva.com/security/advisories?name=MDVSA-2008:050
securityfocus.com/bid/27988
securityfocus.com/archive/1/488966/100/0/threaded
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10857
support.avaya.com/elmodocs2/security/ASA-2008-084.htm
docs.info.apple.com/article.html?artnum=307562
secunia.com/advisories/29087
support.avaya.com/elmodocs2/security/ASA-2008-098.htm
exchange.xforce.ibmcloud.com/vulnerabilities/40842
redhat.com/support/errata/RHSA-2008-0161.html
issues.rpath.com/browse/RPL-2283
securitytracker.com/id?1019497
nvd.nist.gov/vuln/detail/CVE-2008-0596
access.redhat.com/errata/RHSA-2008:0153
access.redhat.com/errata/RHSA-2008:0161
access.redhat.com/security/cve/CVE-2008-0596
bugzilla.redhat.com/show_bug.cgi?id=433825
github.com/advisories/GHSA-8473-h2r9-j663
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=246545
bugzilla.redhat.com/show_bug.cgi?id=433847
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0153.json
cve.org/CVERecord?id=CVE-2008-0596
access.redhat.com/security/cve/CVE-2008-0597
cve.org/CVERecord?id=CVE-2008-0597
nvd.nist.gov/vuln/detail/CVE-2008-0597
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0161.json