REDHAT-BUG-500972: Null Pointer Dereference

Published May 15, 2009

Updated

Anibal Sacco from Core Security Technologies discovered a NULL pointer dereference flaw in CUPS daemon when handling the IPPTAGUNSUPPORTED, which allows remote attackers with access to CUPS' IPP port to crash cupsd.

Acknowledgements:

Red Hat would like to thank Anibal Sacco from Core Security Technologies for reporting this issue.

Affected Software

1 affected component

Red Hat cups

Event History

May 15, 2009

Data Sourced

via Red Hat·09:22 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-500972?

The severity of REDHAT-BUG-500972 is categorized as a potential denial-of-service vulnerability.

How do I fix REDHAT-BUG-500972?

To fix REDHAT-BUG-500972, update the CUPS package to the latest version that addresses the NULL pointer dereference flaw.

What does REDHAT-BUG-500972 affect?

REDHAT-BUG-500972 affects the CUPS daemon used for managing printers and print jobs.

Who discovered REDHAT-BUG-500972?

REDHAT-BUG-500972 was discovered by Anibal Sacco from Core Security Technologies.

Can REDHAT-BUG-500972 be exploited remotely?

Yes, REDHAT-BUG-500972 can be exploited remotely by attackers with access to CUPS' IPP port.