CVE-2008-0597
Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote...
5.0 Medium
Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets.
Exploit likelihood
2.31%Down 1.5 points since Feb 4, 2022
What each source reports
NVD Score used
Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets.
- Record
CVE-2008-0597- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets.
- Record
CVE-2008-0597- Updated
- 2026-11-02
EUVDEUVD-2008-0607 No score
Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets.
- Record
EUVD-2008-0607- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6r33-h68m-pxhm No score
Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote...
Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets.
- Record
GHSA-6r33-h68m-pxhm- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-libsRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cupsRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cupsRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
Show 22 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cups-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-libsRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cupsRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cups-libsRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 1:1.1.17-13.3.51 | 1:1.1.17-13.3.51 |
cupsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-libsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cupsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cupsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-libsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cupsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
cups-libsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:1.1.22-0.rc1.9.20.2.el4_6.5 | 1:1.1.22-0.rc1.9.20.2.el4_6.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0597 is a medium vulnerability (CVSS 5.0) in Easy Software Products Cups, published February 26, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.31%, the 83rd percentile. No source names a fixed version.
References
secunia.com/advisories/29251
lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html
redhat.com/support/errata/RHSA-2008-0153.html
wiki.rpath.com/Advisories:rPSA-2008-0091
Show 26 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9492
mandriva.com/security/advisories?name=MDVSA-2008:050
securityfocus.com/bid/27988
support.avaya.com/elmodocs2/security/ASA-2008-084.htm
exchange.xforce.ibmcloud.com/vulnerabilities/40845
issues.rpath.com/browse/RPL-2283
securitytracker.com/id?1019497
nvd.nist.gov/vuln/detail/CVE-2008-0597
github.com/advisories/GHSA-6r33-h68m-pxhm
access.redhat.com/errata/RHSA-2008:0153
bugzilla.redhat.com/show_bug.cgi?id=246545
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0153.json
cve.org/CVERecord?id=CVE-2008-0596