Oval Definition:	oval:org.mitre.oval:def:8074
Revision Date: 2014-06-23 Version: 18 Title: DSA-1811 cups, cupsys -- null ptr dereference Description: Anibal Sacco discovered that cups, a general printing system for UNIX systems, suffers from null pointer dereference because of its handling of two consecutive IPP packets with certain tag attributes that are treated as IPP_TAG_UNSUPPORTED tags. This allows unauthenticated attackers to perform denial of service attacks by crashing the cups daemon. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2009-0949 DSA-1811 Platform(s): Debian GNU/Linux 4.0 Debian GNU/Linux 5.0 Product(s): cups cupsys Definition Synopsis Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section cupsys-bsd is earlier than 1.3.8-1+lenny6 OR cupsys-client is earlier than 1.3.8-1+lenny6 OR libcupsys2-dev is earlier than 1.3.8-1+lenny6 OR cupsys-common is earlier than 1.3.8-1+lenny6 OR cups-common is earlier than 1.3.8-1+lenny6 OR cupsys-dbg is earlier than 1.3.8-1+lenny6 OR cupsys is earlier than 1.3.8-1+lenny6 OR libcupsys2 is earlier than 1.3.8-1+lenny6 OR Architecture dependent section Supported architectures section Installed architecture is s390 OR Installed architecture is amd64 OR Installed architecture is sparc OR Installed architecture is arm OR Installed architecture is i386 OR Installed architecture is armel OR Installed architecture is mips OR Installed architecture is ia64 OR Installed architecture is alpha OR Installed architecture is powerpc OR Installed architecture is mipsel OR Installed architecture is hppa AND Packages section libcups2-dev is earlier than 1.3.8-1+lenny6 OR cups-bsd is earlier than 1.3.8-1+lenny6 OR libcupsimage2-dev is earlier than 1.3.8-1+lenny6 OR libcupsimage2 is earlier than 1.3.8-1+lenny6 OR cups-client is earlier than 1.3.8-1+lenny6 OR libcups2 is earlier than 1.3.8-1+lenny6 OR cups-dbg is earlier than 1.3.8-1+lenny6 OR cups is earlier than 1.3.8-1+lenny6 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND Packages section libcupsys2-gnutls10 is earlier than 1.2.7-4+etch8 OR cupsys-common is earlier than 1.2.7-4+etch8 OR cupsys-bsd is earlier than 1.2.7-4+etch8 OR cupsys-client is earlier than 1.2.7-4+etch8 OR libcupsys2-dev is earlier than 1.2.7-4+etch8 OR libcupsimage2-dev is earlier than 1.2.7-4+etch8 OR libcupsimage2 is earlier than 1.2.7-4+etch8 OR cupsys-dbg is earlier than 1.2.7-4+etch8 OR cupsys is earlier than 1.2.7-4+etch8 OR libcupsys2 is earlier than 1.2.7-4+etch8
BACK