CVE-2009-0949: apple cups Use of Uninitialized Resource
Vulnerability summary
CVE-2009-0949 is a high (CVSS 7.5) Use of Uninitialized Resource vulnerability in apple cups. EPSS estimates a 19.63% chance of exploitation in the next 30 days, higher than 97.3% of scored vulnerabilities. 3 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 09-06-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.
CVSS metrics
3 scores · 2 sources · 2 versions- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
19.63%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 19.63% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (coresecurity.com)
Maturity: unknown
CUPS 1.3.9 - 'cups/ipp.c' Null Pointer Dereference Denial of Service
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Redhat5 products
- cups< 1:1.3.7-8.el5_3.6
- cups-debuginfo< 1:1.3.7-8.el5_3.6
- cups-devel< 1:1.3.7-8.el5_3.6
- cups-libs< 1:1.3.7-8.el5_3.6
- cups-lpd< 1:1.3.7-8.el5_3.6
Apple3 products
- cups< 1.3.10
- mac_os_x≥ 10.0.0, < 10.4.11 | ≥ 10.5.0, < 10.5.8
- mac_os_x_server≥ 10.0.0, < 10.4.11 | ≥ 10.5.0, < 10.5.8
Debian3 products
- cups< 1.3.10-1 | < 1.3.8-1+lenny6
- cupsys< 1.2.7-4+etch8
- debian_linuxEOL4.0 | 5.0 | 6.0
Canonical1 product
- ubuntu_linuxEOL6.06 | 8.04 | 8.10 | 9.04
Opensuse1 product
- opensuse10.3
Suse1 product
- linux_enterprise9.0 | 10.0
6 vendors · 14 products
References
27 links
www.debian.org/security/2009/dsa-1811Vendor AdvisoryX Refsource DEBIANBroken LinkThird Party Advisory- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9631VDB EntrySignatureX Refsource OVALBroken Link
- lists.apple.com/archives/security-announce/2009/Sep/msg00004.htmlVendor AdvisoryX Refsource APPLEMailing List
- www.coresecurity.com/content/AppleCUPS-null-pointer-vulnerabilityX Refsource MISCExploitThird Party Advisory
Show all 27 references
- lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.htmlVendor AdvisoryX Refsource SUSEMailing List
- www.securityfocus.com/archive/1/504032/100/0/threadedMailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry
