CUPS: Denial of service

CUPS: Denial of service CUPS incorrectly handles partially-negotiated SSL connections allowing for a Denial of Service. cups 2007-03-31 2007-03-31 170881 remote 1.2.9 1.2.9

CUPS provides a portable printing layer for UNIX-based operating systems.

CUPS does not properly handle partially-negotiated SSL connections. Upon receiving a partially-negotiated SSL connection, CUPS no longer accepts further incoming connections, as the initial connection never times out.

An attacker could partially negotiate an SSL connection with a CUPS server, and cause future connections to that server to fail, resulting in a Denial of Service.

There is no known workaround at this time.

All CUPS users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=net-print/cups-1.2.9"

CVE-2007-0720 jaervosz shellsage shellsage