CVE-2015-1158
Fixed in a distro release EPSS 30%
The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.
Products: cups
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.7.5-12 |
| Debian 13 | cups | 1.7.5-12 |
| Debian 14 | cups | 1.7.5-12 |
| Debian 6.0 | cups | 1.4.4-7+squeeze8 |
| Debian 7 | cups | 1.5.3-5+deb7u6 |
| Debian 8 | cups | 1.7.5-11+deb8u1 |
| Red Hat Enterprise Linux 6 | cups | 1:1.4.2-67.el6_6.1 |
| Red Hat Enterprise Linux 6 | cups-debuginfo | 1:1.4.2-67.el6_6.1 |
| Red Hat Enterprise Linux 6 | cups-devel | 1:1.4.2-67.el6_6.1 |
| Red Hat Enterprise Linux 6 | cups-libs | 1:1.4.2-67.el6_6.1 |
| Red Hat Enterprise Linux 6 | cups-lpd | 1:1.4.2-67.el6_6.1 |
| Red Hat Enterprise Linux 6 | cups-php | 1:1.4.2-67.el6_6.1 |
| Red Hat Enterprise Linux 7 | cups | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-client | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-client | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-debuginfo | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-debuginfo | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-devel | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-devel | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-filesystem | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-filesystem | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-ipptool | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-ipptool | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-libs | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-libs | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-lpd | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-lpd | 1:1.6.3-17.el7_1.1 |
| SUSE Linux Enterprise Desktop 12 | cups | 1.7.5-9.1 |
| SUSE Linux Enterprise Module for Legacy 12 | cups154 | 1.5.4-9.1 |
| SUSE Linux Enterprise Server 12 | cups | 1.7.5-9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | cups | 1.7.5-9.1 |
| SUSE Linux Enterprise Software Development Kit 12 | cups | 1.7.5-9.1 |
| Ubuntu 14.04 LTS | cups | 1.7.2-0ubuntu1.6 |
| openSUSE Tumbleweed | cups | 2.1.3-2.3 |