PT-2009-3531 · Apple+1 · Cups+1
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
CUPS versions prior to 1.3.10
Description
The issue is related to the ippReadIO function in cups/ipp.c, which does not properly initialize memory for IPP request packets. This allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash, via a scheduler request with two consecutive IPP TAG UNSUPPORTED tags.
Recommendations
For versions prior to 1.3.10, update to version 1.3.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the scheduler request to minimize the risk of exploitation.
Exploit
Fix
DoS
Use of Uninitialized Resource
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cups
Red Hat