CVE-2009-0949
Fixed in a distro release EPSS 20%
The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.
Products: apple cups, canonical ubuntu_linux, debian_linux, apple mac_os_x, apple mac_os_x_server, opensuse, suse linux_enterprise
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.3.10-1 |
| Debian 13 | cups | 1.3.10-1 |
| Debian 14 | cups | 1.3.10-1 |
| Debian 4.0 | cupsys | 1.2.7-4+etch8 |
| Debian 5.0 | cups | 1.3.8-1+lenny6 |
| Red Hat Enterprise Linux 3 | cups | 1:1.1.17-13.3.62 |
| Red Hat Enterprise Linux 3 | cups-debuginfo | 1:1.1.17-13.3.62 |
| Red Hat Enterprise Linux 3 | cups-devel | 1:1.1.17-13.3.62 |
| Red Hat Enterprise Linux 3 | cups-libs | 1:1.1.17-13.3.62 |
| Red Hat Enterprise Linux 4 | cups | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat Enterprise Linux 4 | cups-debuginfo | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat Enterprise Linux 4 | cups-devel | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat Enterprise Linux 4 | cups-libs | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat Enterprise Linux 5 | cups | 1:1.3.7-8.el5_3.6 |
| Red Hat Enterprise Linux 5 | cups-debuginfo | 1:1.3.7-8.el5_3.6 |
| Red Hat Enterprise Linux 5 | cups-devel | 1:1.3.7-8.el5_3.6 |
| Red Hat Enterprise Linux 5 | cups-libs | 1:1.3.7-8.el5_3.6 |
| Red Hat Enterprise Linux 5 | cups-lpd | 1:1.3.7-8.el5_3.6 |