CVE-2009-1196
published 2009-06-09CVE-2009-1196: The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or…
PriorityP421medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
2.61%
83.8th percentile
The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | >= 0 < 1.1.99.b1.r4748-1 | 1.1.99.b1.r4748-1 |
| apple | cups | >= 0 < 1.1.99.b1.r4748-1 | 1.1.99.b1.r4748-1 |
| apple | cups | >= 0 < 1.1.99.b1.r4748-1 | 1.1.99.b1.r4748-1 |
| apple | cups | >= 0 < 1.1.99.b1.r4748-1 | 1.1.99.b1.r4748-1 |
| debian | cups | < cups 1.1.99.b1.r4748-1 (bookworm) | cups 1.1.99.b1.r4748-1 (bookworm) |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f338-5f7m-892w: The directory-services functionality in the scheduler in CUPS 1
ghsa_unreviewed·2022-05-02
CVE-2009-1196 [MEDIUM] GHSA-f338-5f7m-892w: The directory-services functionality in the scheduler in CUPS 1
The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."
OSV
CVE-2009-1196: The directory-services functionality in the scheduler in CUPS 1
osv·2009-06-09·CVSS 5.0
CVE-2009-1196 [MEDIUM] CVE-2009-1196: The directory-services functionality in the scheduler in CUPS 1
The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."
Red Hat
cups: DoS (stop, crash) by renewing CUPS browse packets
vendor_redhat·2009-06-02·CVSS 5.0
CVE-2009-1196 [MEDIUM] cups: DoS (stop, crash) by renewing CUPS browse packets
cups: DoS (stop, crash) by renewing CUPS browse packets
The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."
Debian
CVE-2009-1196: cups - The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 ...
vendor_debian·2009·CVSS 5.0
CVE-2009-1196 [MEDIUM] CVE-2009-1196: cups - The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 ...
The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."
Scope: local
bookworm: resolved (fixed in 1.1.99.b1.r4748-1)
bullseye: resolved (fixed in 1.1.99.b1.r4748-1)
forky: resolved (fixed in 1.1.99.b1.r4748-1)
sid: resolved (fixed in 1.1.99.b1.r4748-1)
trixie: resolved (fixed in 1.1.99.b1.r4748-1)
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/35340http://securitytracker.com/id?1022327http://www.redhat.com/support/errata/RHSA-2009-1083.htmlhttp://www.securityfocus.com/bid/35194http://www.vupen.com/english/advisories/2009/1488https://bugzilla.redhat.com/show_bug.cgi?id=497135https://exchange.xforce.ibmcloud.com/vulnerabilities/50944https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11217http://secunia.com/advisories/35340http://securitytracker.com/id?1022327http://www.redhat.com/support/errata/RHSA-2009-1083.htmlhttp://www.securityfocus.com/bid/35194http://www.vupen.com/english/advisories/2009/1488https://bugzilla.redhat.com/show_bug.cgi?id=497135https://exchange.xforce.ibmcloud.com/vulnerabilities/50944https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11217
2009-06-09
Published