Search for packages
Package details: pkg:deb/ubuntu/cups-filters@1.0.25-1
purl pkg:deb/ubuntu/cups-filters@1.0.25-1
Next non-vulnerable version 1.4.0-1
Latest non-vulnerable version 1.4.0-1
Risk 4.0
Vulnerabilities affecting this package (9)
Vulnerability Summary Fixed by
VCID-2457-5x8s-aaap
Aliases:
CVE-2014-2707
cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to "System V interface scripts generated for queues."
1.0.52-0ubuntu1.1
Affected by 5 other vulnerabilities.
VCID-5r36-d4z9-aaar
Aliases:
CVE-2015-8327
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.
1.0.52-0ubuntu1.6
Affected by 1 other vulnerability.
1.2.0-1
Affected by 1 other vulnerability.
VCID-8xgw-dx15-aaac
Aliases:
CVE-2015-2265
The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the (1) model or (2) PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707.
1.0.52-0ubuntu1.4
Affected by 4 other vulnerabilities.
VCID-n4hv-xsfw-aaan
Aliases:
CVE-2014-4336
The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the host name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707.
1.0.52-0ubuntu1.1
Affected by 5 other vulnerabilities.
VCID-sm8v-vqn7-aaar
Aliases:
CVE-2014-4338
cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpreted as granting browse access to all IP addresses.
1.0.52-0ubuntu1.1
Affected by 5 other vulnerabilities.
VCID-sv1v-5ata-aaap
Aliases:
CVE-2015-8560
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.
1.0.52-0ubuntu1.7
Affected by 1 other vulnerability.
1.4.0-1
Affected by 0 other vulnerabilities.
VCID-vgxz-jsxc-aaan
Aliases:
CVE-2015-3258
Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.
1.0.52-0ubuntu1.5
Affected by 2 other vulnerabilities.
VCID-xchc-jqf7-aaac
Aliases:
CVE-2015-3279
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
1.0.52-0ubuntu1.5
Affected by 2 other vulnerabilities.
VCID-zaj6-umpv-aaac
Aliases:
CVE-2014-4337
The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted packet data.
1.0.52-0ubuntu1.1
Affected by 5 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version