p PatchFirst

CVE-2015-8560

CVE-2015-8560

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.

CVSS 7.3 · High · EPSS 5.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • cups-filters Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.4.0-1

    Update to 1.4.0-1

  • cups-filters Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.4.0-1

    Update to 1.4.0-1

  • cups-filters Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.4.0-1

    Update to 1.4.0-1

  • foomatic-filters Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.0.17-7

    Update to 4.0.17-7

  • foomatic-filters Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.0.17-7

    Update to 4.0.17-7

  • foomatic-filters Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.0.17-7

    Update to 4.0.17-7

  • cups-filters Ubuntu:14.04:LTS

    Versions
    • 1.0.40-0ubuntu1
    • 1.0.40-0ubuntu2
    • 1.0.41-0ubuntu1
    • 1.0.41-2
    • 1.0.42-1
    • 1.0.42-2
    • 1.0.43-1
    • 1.0.44-1
    • 1.0.44-2
    • 1.0.45-1
    • 1.0.46-0ubuntu1
    • 1.0.47-0ubuntu1
    • 1.0.48-0ubuntu1
    • 1.0.48-0ubuntu2
    • 1.0.49-0ubuntu1
    • 1.0.50-0ubuntu1
    • 1.0.51-0ubuntu1
    • 1.0.52-0ubuntu1
    • 1.0.52-0ubuntu1.1
    • 1.0.52-0ubuntu1.2
    • 1.0.52-0ubuntu1.4
    • 1.0.52-0ubuntu1.5
    • 1.0.52-0ubuntu1.6
    Affected ranges
    • ECOSYSTEM: < 1.0.52-0ubuntu1.7

    Update to 1.0.52-0ubuntu1.7

  • foomatic-filters Ubuntu:14.04:LTS

    Versions
    • 4.0.17-1ubuntu1
    Affected ranges
    • ECOSYSTEM: < 4.0.17-1+deb7u1ubuntu0.14.04.1

    Update to 4.0.17-1+deb7u1ubuntu0.14.04.1

Original sources

Check your server →