CVE-2009-1196
Published: 9 June 2009
The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."
Notes
| Author | Note |
|---|---|
| mdeslaur | was fixed upstream in 1.1.23 |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
cups Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
| hardy |
Does not exist
|
|
| intrepid |
Not vulnerable
|
|
| jaunty |
Not vulnerable
|
|
| upstream |
Released
(1.1.23)
|
|
|
cupsys Launchpad, Ubuntu, Debian |
dapper |
Not vulnerable
|
| hardy |
Not vulnerable
|
|
| intrepid |
Does not exist
|
|
| jaunty |
Does not exist
|
|
| upstream |
Released
(1.1.23)
|