CVE-2009-1196: Medium severity cups vulnerability
Swen van Brussel reported pointer use-after-delete flaw, present in the CUPS directory services routine, processing new data about available printers and printer classes. A remote attacker could suspend, and after a carefully-chosen time interval renew sending of CUPS browse packets to the victim machine with running cupsd daemon, leading to a denial of service (cupsd daemon stop or crash).
Acknowledgements:
Red Hat would like to thank Swen van Brussel for reporting this issue.
Other sources
The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1196?
CVE-2009-1196 is rated as having a moderate severity due to its potential exploitation by remote attackers.
How do I fix CVE-2009-1196?
To fix CVE-2009-1196, ensure you update CUPS to version 1.1.23 or later, which addresses this vulnerability.
What types of systems are affected by CVE-2009-1196?
CVE-2009-1196 affects CUPS versions 1.1.17 and 1.1.22, typically found on macOS and other Unix-like systems.
Can CVE-2009-1196 be exploited remotely?
Yes, a successful exploit of CVE-2009-1196 can allow a remote attacker to cause a denial of service by sending crafted CUPS browse packets.
What is a use-after-delete vulnerability in the context of CVE-2009-1196?
A use-after-delete vulnerability like CVE-2009-1196 occurs when a program continues to use a pointer after the memory it points to has been freed, potentially leading to unexpected behavior.