CVE-2009-0949

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers…

published June 9, 2009

CVSS
—
EPSS
20%
Percentile
97.4
In the wild
Unconfirmed
What it is

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19633 · 97.4th percentile
Published
2009-06-09T17:00Z
EPSS history
Timeline
  • 09 JUN 17:00Z
    The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers…
    cvelistv5