Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2004-0558

36
FAUCET Score

CVE-2004-0558 describes a denial-of-service vulnerability in the Internet Printing Protocol (IPP) implementation of CUPS versions prior to 1.1.21. Remote attackers can exploit this flaw by sending a specially crafted UDP packet to the IPP port, causing the service to hang. With a CVSS score of 5.0 and a FAUCET Risk Score of 84/100, this vulnerability is considered moderately severe, requiring no authentication and having a low attack complexity. While there is no evidence of active exploitation in the wild, exploit code is publicly available through ExploitDB (EDB-24599). Community discussion and media coverage for this CVE are minimal.

Impacted Technologies

VendorProductVersion(s)CPE
<= 1.1.21CPE matchmatch criteria
cpe:2.3:a:easy_software_products:cups:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
26.79%
Probability of exploitation in next 30 days
EPSS Percentile
97.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
ExploitDB: EDB-24599 · Sep 15, 2004
This CVE's current EPSS score of 0.2679 is in the 98th percentile among its peer group of 23,684 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

debianpatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: cups-1:1.1.17-13.3.13
View patch

Vendor Advisories (1)

redhatCVE-2004-0558

security flaw

Aug 21, 2004

References

distro.conectiva.com.br / atualizacoes
lists.apple.com / archives/security-announce/2004/Oct/msg00000.html
marc.info
bugzilla.fedora.us / show_bug.cgi
Patch
exchange.xforce.ibmcloud.com / vulnerabilities/17389
github.com / fibonascii/CVE-2004-0558
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11732
sunsolve.sun.com / search/document.do
sunsolve.sun.com / search/document.do
sunsolve.sun.com / search/document.do
debian.org / security/2004/dsa-545
PatchVendor Advisory
mandrakesecure.net / en/advisories/advisory.php
redhat.com / support/errata/RHSA-2004-449.html
PatchVendor Advisory
securityfocus.com / bid/11183
suse.com / de/security/2004_31_cups.html
trustix.org / errata/2004/0047
Vendor Advisory