The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cups | Aug 30, 2017 | Jun 26, 2015 |
| Apple Osx Adminframework | — | Upgrade macOS to the latest versionApply OS X security update 2015-004 | Aug 28, 2015 | Jun 26, 2015 |
| Apple Osx Cups | — | Upgrade macOS to the latest version | Mar 29, 2016 | Jun 26, 2015 |
| Centos_linux | — | Upgrade cups-libsUpgrade cups-ipptoolUpgrade cups-clientUpgrade cups-filesystemUpgrade cups-phpUpgrade cupsUpgrade cups-lpdUpgrade cups-devel | Dec 1, 2016 | Jun 26, 2015 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Jun 26, 2015 |
| Freebsd | — | Upgrade cups-base | Dec 10, 2025 | Jun 9, 2015 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Jun 26, 2015 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Jun 26, 2015 |
| Oracle_linux | — | Upgrade cups-phpUpgrade cups-filesystemUpgrade cups-libsUpgrade cups-ipptoolUpgrade cups-clientUpgrade cups-develUpgrade cupsUpgrade cups-lpd | Oct 16, 2024 | Jun 26, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 10, 2015 |
| Suse | — | Upgrade cups154-clientUpgrade libcups2-32bitUpgrade cups154-libsUpgrade libcupsimage2Upgrade libcupsmime1Upgrade cups-develUpgrade libcupscgi1Upgrade cups-libs-32bitUpgrade cups-clientUpgrade cups-configUpgrade cupsUpgrade libcupsppdc1Upgrade cups154-filtersUpgrade cups154Upgrade libcups2Upgrade cups-ddkUpgrade cups-libs | Dec 18, 2015 | Jun 11, 2015 |
| Ubuntu | — | Upgrade cups | Nov 8, 2024 | Jun 26, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub