Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-0949

Опубликовано: 02 июн. 2009
Источник: redhat
CVSS2: 5

Описание

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.

Дополнительная информация

Статус:

Important
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=500972cups: IPP_TAG_UNSUPPORTED handling NULL pointer dereference DoS

5 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 16 лет назад

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.

CVSS3: 7.5
nvd
около 16 лет назад

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.

CVSS3: 7.5
debian
около 16 лет назад

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 do ...

CVSS3: 7.5
github
около 3 лет назад

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.

oracle-oval
около 16 лет назад

ELSA-2009-1082: cups security update (IMPORTANT)

5 Medium

CVSS2