CVE-2009-0949
High · 7.5CVSS
7.5
EPSS
19.6%
Published
Jun 9, 2009
CISA due date
—
The record
The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | cups | 0 | 1.3.10-1 |
| Debian:12 | cups | 0 | 1.3.10-1 |
| Debian:13 | cups | 0 | 1.3.10-1 |
| Debian:4.0 | cupsys | 0 | 1.2.7-4+etch8 |
| Debian:5.0 | cups | 0 | 1.3.8-1+lenny6 |
| Red Hat:enterprise_linux:3::as | cups | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::as | cups-debuginfo | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::as | cups-devel | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::as | cups-libs | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::desktop | cups | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::desktop | cups-debuginfo | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::desktop | cups-devel | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::desktop | cups-libs | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::es | cups | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::es | cups-debuginfo | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::es | cups-devel | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::es | cups-libs | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::ws | cups | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::ws | cups-debuginfo | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::ws | cups-devel | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:3::ws | cups-libs | 0 | 1:1.1.17-13.3.62 |
| Red Hat:enterprise_linux:4::as | cups | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::as | cups-debuginfo | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::as | cups-devel | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::as | cups-libs | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | cups | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | cups-debuginfo | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | cups-devel | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | cups-libs | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::es | cups | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::es | cups-debuginfo | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::es | cups-devel | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::es | cups-libs | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | cups | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | cups-debuginfo | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | cups-devel | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | cups-libs | 0 | 1:1.1.22-0.rc1.9.32.el4_8.3 |
| Red Hat:enterprise_linux:5::client | cups | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::client | cups-debuginfo | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::client | cups-devel | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::client | cups-libs | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::client | cups-lpd | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | cups | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | cups-debuginfo | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | cups-devel | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | cups-libs | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | cups-lpd | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::server | cups | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::server | cups-debuginfo | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::server | cups-devel | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::server | cups-libs | 0 | 1:1.3.7-8.el5_3.6 |
| Red Hat:enterprise_linux:5::server | cups-lpd | 0 | 1:1.3.7-8.el5_3.6 |
Related vulnerabilities
- CVE-2024-47176 CUPS is a standards-based, open-source printing system, and `cups-browsed` contains… Also affects cups
- CVE-2024-47076 CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the… Also affects cups
- CVE-2024-47175 CUPS is a standards-based, open-source printing system, and `libppd` can be used for… Also affects cups
- CVE-2024-47177 CUPS is a standards-based, open-source printing system, and cups-filters provides… Also affects cups
- CVE-2023-32360 An authentication issue was addressed with improved state management. Also affects cups
- CVE-2019-2228 In array_find of array.c, there is a possible out-of-bounds read due to an incorrect… Also affects cups
- CVE-2015-3258 Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf… Also affects cups
- CVE-2015-1158 The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect… Also affects cups