Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade foomatic | Apr 21, 2016 | Apr 14, 2016 |
| Centos_linux | — | Upgrade foomatic | Jul 6, 2016 | Mar 23, 2016 |
| Debian | — | Upgrade cups-filtersUpgrade foomatic-filters | Dec 21, 2015 | Dec 21, 2015 |
| Freebsd | — | Upgrade foomatic-filtersUpgrade cups-filters | Dec 10, 2025 | Dec 17, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade foomaticUpgrade foomatic-filters | Dec 4, 2019 | Apr 14, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade foomaticUpgrade foomatic-filters | Dec 18, 2019 | Apr 14, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade foomaticUpgrade foomatic-filters | Sep 24, 2019 | Apr 14, 2016 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Apr 14, 2016 |
| Oracle_linux | — | Upgrade foomatic | Mar 28, 2016 | Mar 28, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 12, 2015 |
| Suse | — | Upgrade cups-filtersUpgrade cups-filters-ghostscriptUpgrade cups-filters-develUpgrade foomatic-filtersUpgrade cups-filters-cups-browsedUpgrade cups-filters-foomatic-rip | Jan 13, 2016 | Jan 13, 2016 |
| Ubuntu | — | Upgrade cups-filtersUpgrade foomatic-filters | Dec 18, 2015 | Dec 16, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub