← back
CVE-2009-0949

CVE-2009-0949

EPSS 19.6%
The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/33020unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=500972http://secunia.com/advisories/35322http://secunia.com/advisories/35328http://secunia.com/advisories/35340http://secunia.com/advisories/35342http://secunia.com/advisories/35685http://secunia.com/advisories/36701http://securitytracker.com/id?1022321https://exchange.xforce.ibmcloud.com/vulnerabilities/50926https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9631