CVE-2004-0558

The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers...

5.0 MediumPublic exploitFix available

The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.

Exploit likelihood

26.8%Up 14.2 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.

Record: CVE-2004-0558
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.

Record: CVE-2004-0558
Updated: 2026-11-02

EUVDEUVD-2004-0557 No score

The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.

Record: EUVD-2004-0557
Updated: 2026-11-03

GitHub AdvisoriesGHSA-39hx-hjhc-q6p6 No score

The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers...

The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.

Record: GHSA-39hx-hjhc-q6p6
Updated: 2026-11-02

OSV No score

The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.

Record: CVE-2004-0558
Updated: 2026-11-02

OSVDEBIAN-CVE-2004-0558 No score

The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.

Record: DEBIAN-CVE-2004-0558
Updated: 2026-11-02

Affected products

easy software products cups

Affected packages

Affected packages
Package	Affected	Fixed
`cups` Debian:12	before 1.1.20final+rc1-6	1.1.20final+rc1-6
`cups` Debian:13	before 1.1.20final+rc1-6	1.1.20final+rc1-6
`cups` Debian:14	before 1.1.20final+rc1-6	1.1.20final+rc1-6
`cupsys` Debian:3.0	before 1.1.14-5woody6	1.1.14-5woody6
`cups` Red Hat:enterprise_linux:3::as	before 1:1.1.17-13.3.13	1:1.1.17-13.3.13
`cups-devel` Red Hat:enterprise_linux:3::as	before 1:1.1.17-13.3.13	1:1.1.17-13.3.13
`cups-libs` Red Hat:enterprise_linux:3::as	before 1:1.1.17-13.3.13	1:1.1.17-13.3.13
`cups` Red Hat:enterprise_linux:3::desktop	before 1:1.1.17-13.3.13	1:1.1.17-13.3.13
`cups-devel` Red Hat:enterprise_linux:3::desktop	before 1:1.1.17-13.3.13	1:1.1.17-13.3.13
`cups-libs` Red Hat:enterprise_linux:3::desktop	before 1:1.1.17-13.3.13	1:1.1.17-13.3.13

Show 6 moreShow less

Affected packages
Package	Affected	Fixed
`cups` Red Hat:enterprise_linux:3::es	before 1:1.1.17-13.3.13	1:1.1.17-13.3.13
`cups-devel` Red Hat:enterprise_linux:3::es	before 1:1.1.17-13.3.13	1:1.1.17-13.3.13
`cups-libs` Red Hat:enterprise_linux:3::es	before 1:1.1.17-13.3.13	1:1.1.17-13.3.13
`cups` Red Hat:enterprise_linux:3::ws	before 1:1.1.17-13.3.13	1:1.1.17-13.3.13
`cups-devel` Red Hat:enterprise_linux:3::ws	before 1:1.1.17-13.3.13	1:1.1.17-13.3.13
`cups-libs` Red Hat:enterprise_linux:3::ws	before 1:1.1.17-13.3.13	1:1.1.17-13.3.13

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	CUPS 1.1.x - UDP Packet Remote Denial of Service	2004-09-15
PoC in GitHub	fibonascii/CVE-2004-0558	2018-03-10

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-0558 is a medium vulnerability (CVSS 5.0) in Easy Software Products Cups, published September 15, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 26.8%, the 98th percentile. Fixed in cups 1.1.20final+rc1-6.

References

Show 21 moreShow less