VULNERABILITY INTELLIGENCE

CVE-2009-1196

CVSS score5 MEDIUM
EPSS probability2.61%
CISA KEVNot currently listed
Published2009-06-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."

Primary references