CVE-2002-1368observed exploitation

CVE-2002-1368

50Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actepss 15%

from disclosure to weapon0 days

Published on NVDDec 20

1st PoCDec 19

VulnCheckDec 19

exploitation probability

15%top 3% of all CVEs

observed exploitation

yesVulnCheck

1 public exploit(s)

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/22106

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References