Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-foomatic | Apr 21, 2016 | Apr 14, 2016 |
| Centos_linux | — | centos-upgrade-foomatic | Jul 6, 2016 | Mar 23, 2016 |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-foomatichuawei-euleros-2_0_sp2-upgrade-foomatic-filters | Dec 4, 2019 | Apr 14, 2016 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-foomatichuawei-euleros-2_0_sp3-upgrade-foomatic-filters | Dec 18, 2019 | Apr 14, 2016 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-foomatichuawei-euleros-2_0_sp5-upgrade-foomatic-filters | Sep 24, 2019 | Apr 14, 2016 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0 | Oct 19, 2018 | Apr 14, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-foomatic | Mar 28, 2016 | Mar 28, 2016 |
| Suse | — | suse-upgrade-cups-filterssuse-upgrade-cups-filters-cups-browsedsuse-upgrade-cups-filters-develsuse-upgrade-cups-filters-foomatic-ripsuse-upgrade-cups-filters-ghostscriptsuse-upgrade-foomatic-filters | Jan 13, 2016 | Jan 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub