cbcvebase.
CVE-2015-8327
published 2015-12-17

CVE-2015-8327: Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote…

high7.5CVSS 3.1
AVNACLAuNCPIPAP
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Affected

82 ranges· showing 25
VendorProductVersion rangeFixed in
canonicalubuntu_linux——
canonicalubuntu_linux——
canonicalubuntu_linux——
canonicalubuntu_linux——
debiancups-filters< cups-filters 1.4.0-1 (bookworm)cups-filters 1.4.0-1 (bookworm)
debiancups-filters< cups-filters 1.2.0-1 (bookworm)cups-filters 1.2.0-1 (bookworm)
debiandebian_linux——
debianfoomatic-filters< cups-filters 1.4.0-1 (bookworm)cups-filters 1.4.0-1 (bookworm)
debianfoomatic-filters< cups-filters 1.2.0-1 (bookworm)cups-filters 1.2.0-1 (bookworm)
foomatic-filtersfoomatic-filters>= 0 < 4.0.17-74.0.17-7
foomatic-filtersfoomatic-filters>= 0 < 4.0.17-74.0.17-7
foomatic-filtersfoomatic-filters>= 0 < 4.0.17-74.0.17-7
foomatic-filtersfoomatic-filters>= 0 < 4.0.17-74.0.17-7
linuxfoundationcups-filters——
linuxfoundationcups-filters——
linuxfoundationcups-filters——
linuxfoundationcups-filters——
linuxfoundationcups-filters——
linuxfoundationcups-filters——
linuxfoundationcups-filters——
linuxfoundationcups-filters——
linuxfoundationcups-filters——
linuxfoundationcups-filters——
linuxfoundationcups-filters——
linuxfoundationcups-filters——

CVSS provenance

nvd7.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
nvdv3.07.3HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
osv7.5HIGH