The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cups | Aug 30, 2017 | Jun 26, 2015 |
| Apple Osx Adminframework | — | Upgrade macOS to the latest versionApply OS X security update 2015-004 | Aug 28, 2015 | Jun 26, 2015 |
| Apple Osx Cups | — | Upgrade macOS to the latest version | Mar 29, 2016 | Jun 26, 2015 |
| Centos_linux | — | Upgrade cups-ipptoolUpgrade cups-clientUpgrade cups-libsUpgrade cups-filesystemUpgrade cups-develUpgrade cupsUpgrade cups-phpUpgrade cups-lpd | Dec 1, 2016 | Jun 26, 2015 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Jun 26, 2015 |
| Freebsd | — | Upgrade cups-base | Dec 10, 2025 | Jun 9, 2015 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Jun 26, 2015 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Jun 26, 2015 |
| Oracle_linux | — | Upgrade cups-ipptoolUpgrade cups-filesystemUpgrade cups-phpUpgrade cups-libsUpgrade cups-clientUpgrade cupsUpgrade cups-develUpgrade cups-lpd | Oct 16, 2024 | Jun 26, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 10, 2015 |
| Suse | — | Upgrade cups-libs-32bitUpgrade libcupsppdc1Upgrade libcupscgi1Upgrade cups154-filtersUpgrade libcups2Upgrade cupsUpgrade cups-clientUpgrade cups-ddkUpgrade cups154Upgrade cups-libsUpgrade cups-configUpgrade cups-develUpgrade libcups2-32bitUpgrade libcupsimage2Upgrade libcupsmime1Upgrade cups154-libsUpgrade cups154-client | Dec 18, 2015 | Jun 11, 2015 |
| Ubuntu | — | Upgrade cups | Nov 8, 2024 | Jun 26, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub