CVE-2015-3258
Fixed in a distro release EPSS 8%
Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.
Products: canonical ubuntu_linux, debian_linux, linuxfoundation cups-filters
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.5.0-16 |
| Debian 12 | cups-filters | 1.0.70-1 |
| Debian 13 | cups | 1.5.0-16 |
| Debian 13 | cups-filters | 1.0.70-1 |
| Debian 14 | cups | 1.5.0-16 |
| Debian 14 | cups-filters | 1.0.70-1 |
| Debian 6.0 | cups | 1.4.4-7+squeeze10 |
| Debian 7 | cups-filters | 1.0.18-2.1+deb7u2 |
| Debian 8 | cups-filters | 1.0.61-5+deb8u1 |
| Red Hat Enterprise Linux 7 | cups-filters | 0:1.0.35-21.el7 |
| Red Hat Enterprise Linux 7 | cups-filters-debuginfo | 0:1.0.35-21.el7 |
| Red Hat Enterprise Linux 7 | cups-filters-devel | 0:1.0.35-21.el7 |
| Red Hat Enterprise Linux 7 | cups-filters-libs | 0:1.0.35-21.el7 |
| SUSE Linux Enterprise Desktop 12 | cups-filters | 1.0.58-8.1 |
| SUSE Linux Enterprise Server 12 | cups-filters | 1.0.58-8.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | cups-filters | 1.0.58-8.1 |
| Ubuntu 14.04 LTS | cups-filters | 1.0.52-0ubuntu1.5 |
| openSUSE Tumbleweed | cups-filters | 1.8.2-1.11 |