CVE Vulnerabilities

CVE-2009-0949

Published: Jun 09, 2009 | Modified: Oct 10, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
5 IMPORTANT
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.

Affected Software

Name Vendor Start Version End Version
Cups Apple 1.1 1.1
Cups Apple 1.1.1 1.1.1
Cups Apple 1.1.2 1.1.2
Cups Apple 1.1.3 1.1.3
Cups Apple 1.1.4 1.1.4
Cups Apple 1.1.5 1.1.5
Cups Apple 1.1.5-1 1.1.5-1
Cups Apple 1.1.5-2 1.1.5-2
Cups Apple 1.1.6 1.1.6
Cups Apple 1.1.6-1 1.1.6-1
Cups Apple 1.1.6-2 1.1.6-2
Cups Apple 1.1.6-3 1.1.6-3
Cups Apple 1.1.7 1.1.7
Cups Apple 1.1.8 1.1.8
Cups Apple 1.1.9 1.1.9
Cups Apple 1.1.9-1 1.1.9-1
Cups Apple 1.1.10 1.1.10
Cups Apple 1.1.10-1 1.1.10-1
Cups Apple 1.1.11 1.1.11
Cups Apple 1.1.12 1.1.12
Cups Apple 1.1.13 1.1.13
Cups Apple 1.1.14 1.1.14
Cups Apple 1.1.15 1.1.15
Cups Apple 1.1.16 1.1.16
Cups Apple 1.1.17 1.1.17
Cups Apple 1.1.18 1.1.18
Cups Apple 1.1.19 1.1.19
Cups Apple 1.1.19 1.1.19
Cups Apple 1.1.19 1.1.19
Cups Apple 1.1.19 1.1.19
Cups Apple 1.1.19 1.1.19
Cups Apple 1.1.19 1.1.19
Cups Apple 1.1.20 1.1.20
Cups Apple 1.1.20 1.1.20
Cups Apple 1.1.20 1.1.20
Cups Apple 1.1.20 1.1.20
Cups Apple 1.1.20 1.1.20
Cups Apple 1.1.20 1.1.20
Cups Apple 1.1.20 1.1.20
Cups Apple 1.1.21 1.1.21
Cups Apple 1.1.21 1.1.21
Cups Apple 1.1.21 1.1.21
Cups Apple 1.1.22 1.1.22
Cups Apple 1.1.22 1.1.22
Cups Apple 1.1.22 1.1.22
Cups Apple 1.1.23 1.1.23
Cups Apple 1.1.23 1.1.23
Cups Apple 1.2 1.2
Cups Apple 1.2 1.2
Cups Apple 1.2 1.2
Cups Apple 1.2 1.2
Cups Apple 1.2 1.2
Cups Apple 1.2.0 1.2.0
Cups Apple 1.2.1 1.2.1
Cups Apple 1.2.2 1.2.2
Cups Apple 1.2.3 1.2.3
Cups Apple 1.2.4 1.2.4
Cups Apple 1.2.5 1.2.5
Cups Apple 1.2.6 1.2.6
Cups Apple 1.2.7 1.2.7
Cups Apple 1.2.8 1.2.8
Cups Apple 1.2.9 1.2.9
Cups Apple 1.2.10 1.2.10
Cups Apple 1.2.11 1.2.11
Cups Apple 1.2.12 1.2.12
Cups Apple 1.3 1.3
Cups Apple 1.3 1.3
Cups Apple 1.3 1.3
Cups Apple 1.3.0 1.3.0
Cups Apple 1.3.1 1.3.1
Cups Apple 1.3.2 1.3.2
Cups Apple 1.3.3 1.3.3
Cups Apple 1.3.4 1.3.4
Cups Apple 1.3.5 1.3.5
Cups Apple 1.3.6 1.3.6
Cups Apple 1.3.7 1.3.7
Cups Apple 1.3.8 1.3.8
Cups Apple * 1.3.9
Red Hat Enterprise Linux 3 RedHat cups-1:1.1.17-13.3.62 *
Red Hat Enterprise Linux 4 RedHat cups-1:1.1.22-0.rc1.9.32.el4_8.3 *
Red Hat Enterprise Linux 5 RedHat cups-1:1.3.7-8.el5_3.6 *
Cups Ubuntu intrepid *
Cups Ubuntu jaunty *
Cups Ubuntu upstream *
Cupsys Ubuntu dapper *
Cupsys Ubuntu hardy *

References