← Back

CVE-2015-8560

nvd nist
Published: Apr 14, 2016Modified: May 6, 2026

JSON object

Loading...
7.3
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Exploitability: 3.9 / Impact: 3.4
Source: NVD

Description

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.

Affected (61)

1 product
Ubuntu Linux
1 product
Debian Linux
2 products
Cups Filters
Foomatic Filters
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 12.04
Version 14.04
Version 15.04
Version 15.10
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 8.0
Configuration C
38 vulnerable
Vulnerable SoftwareAffected Versions
Linuxfoundation
Version 1.0.42
Version 1.0.43
Version 1.0.44
Version 1.0.45
Version 1.0.46
Version 1.0.47
Version 1.0.48
Version 1.0.49
Version 1.0.50
Version 1.0.51
Version 1.0.52
Version 1.0.53
Version 1.0.54
Version 1.0.55
Version 1.0.56
Version 1.0.57
Version 1.0.58
Version 1.0.59
Version 1.0.60
Version 1.0.61
Version 1.0.62
Version 1.0.63
Version 1.0.64
Version 1.0.65
Version 1.0.66
Version 1.0.67
Version 1.0.68
Version 1.0.69
Version 1.0.70
Version 1.0.71
Version 1.0.72
Version 1.0.73
Version 1.0.74
Version 1.0.75
Version 1.0.76
Version 1.1.0
Version 1.2.0
Version 1.3.0
Configuration D
18 vulnerable

References (20)

Source: security@debian.org
Source: security@debian.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.