VULNERABILITY INTELLIGENCE

CVE-2010-2432

CVSS score5 NONE
EPSS probability2.10%
CISA KEVNot currently listed
Published2010-06-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service (infinite loop) via HTTP_UNAUTHORIZED responses.

Weakness classification

  • nvd@nist.gov: CWE-399

Primary references