NVD

Id
48259  
Name
CVE-2009-0949  
Description
The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-06-09  
Modified Date
2010-08-21  
Seq
2009-0949  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242667 48259 CVE-2009-0949 APPLE-SA-2009-09-10-2  View
242668 48259 CVE-2009-0949 SUSE-SR:2009:012  View
242669 48259 CVE-2009-0949 oval:org.mitre.oval:def:9631  View
242670 48259 CVE-2009-0949 1022321  View
242671 48259 CVE-2009-0949 http://support.apple.com/kb/HT3865  View
242672 48259 CVE-2009-0949 http://www.coresecurity.com/content/AppleCUPS-null-pointer-vulnerability  View
242673 48259 CVE-2009-0949 DSA-1811  View
242674 48259 CVE-2009-0949 RHSA-2009:1082  View
242675 48259 CVE-2009-0949 RHSA-2009:1083  View
242676 48259 CVE-2009-0949 20090602 CORE-2009-0420 - Apple CUPS IPP_TAG_UNSUPPORTED Handling null pointer Vulnerability  View
242677 48259 CVE-2009-0949 35169  View
242678 48259 CVE-2009-0949 USN-780-1  View
242679 48259 CVE-2009-0949 apple-cups-ipptag-dos(50926)  View
242680 48259 CVE-2009-0949 https://bugzilla.redhat.com/show_bug.cgi?id=500972  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40727 JVNDB-2009-001733 CUPS の ippReadIO 関数におけるサービス運用妨害 (DoS) の脆弱性 CUPS の cupsd cups/ipp.c 内の ippReadIO 関数には、IPP リクエストパケットに対してメモリの初期化を正しく行わないことにより、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-0949 38380 CVE-2009-0949 48259 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001733.html 2009-06-03 2010-05-07 View