CVE-2009-1196: The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to...

Security readout for executives and security teams

CVE-2009-1196 is a remote denial-of-service flaw in CUPS directory-services handling. An attacker could disrupt the cupsd printing service by manipulating the timing of CUPS browse packets. The known impact is outage or crash, not data theft or code execution. Exposure is most relevant where affected CUPS versions accept browse packets from untrusted or broad network segments. Systems not running these old CUPS versions, or not exposing CUPS directory-services traffic, are less likely to be affected. Treat this as operational availability risk, especially for legacy print infrastructure. Prioritize remediation where printing supports business-critical workflows or where old CUPS services are network-accessible. Mitigation focus: Identify any systems running CUPS 1.1.17 or 1.1.22.; Apply vendor updates, including Red Hat RHSA-2009:1083 where applicable.; Check current OS vendor guidance for supported fixed packages..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.