CVE-2015-1159
Fixed in a distro release EPSS 7%
Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.
Products: cups
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.7.5-12 |
| Debian 13 | cups | 1.7.5-12 |
| Debian 14 | cups | 1.7.5-12 |
| Debian 6.0 | cups | 1.4.4-7+squeeze8 |
| Debian 7 | cups | 1.5.3-5+deb7u6 |
| Debian 8 | cups | 1.7.5-11+deb8u1 |
| Red Hat Enterprise Linux 6 | cups | 1:1.4.2-67.el6_6.1 |
| Red Hat Enterprise Linux 6 | cups-debuginfo | 1:1.4.2-67.el6_6.1 |
| Red Hat Enterprise Linux 6 | cups-devel | 1:1.4.2-67.el6_6.1 |
| Red Hat Enterprise Linux 6 | cups-libs | 1:1.4.2-67.el6_6.1 |
| Red Hat Enterprise Linux 6 | cups-lpd | 1:1.4.2-67.el6_6.1 |
| Red Hat Enterprise Linux 6 | cups-php | 1:1.4.2-67.el6_6.1 |
| Red Hat Enterprise Linux 7 | cups | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-client | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-client | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-debuginfo | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-debuginfo | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-devel | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-devel | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-filesystem | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-filesystem | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-ipptool | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-ipptool | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-libs | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-libs | 1:1.6.3-17.el7_1.1 |
| Red Hat Enterprise Linux 7 | cups-lpd | 1:1.6.3-17.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | cups-lpd | 1:1.6.3-17.el7_1.1 |
| SUSE Linux Enterprise Desktop 12 | cups | 1.7.5-9.1 |
| SUSE Linux Enterprise Module for Legacy 12 | cups154 | 1.5.4-9.1 |
| SUSE Linux Enterprise Server 12 | cups | 1.7.5-9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | cups | 1.7.5-9.1 |
| SUSE Linux Enterprise Software Development Kit 12 | cups | 1.7.5-9.1 |
| Ubuntu 14.04 LTS | cups | 1.7.2-0ubuntu1.6 |
| openSUSE Tumbleweed | cups | 2.1.3-2.3 |