CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. Its EPSS score suggests a 19.6% probability of exploitation in the next 30 days. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2009-0949
Severity
HIGH
CVSS
7.5
EPSS
19.63%
Original NVD Description
The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.