CVE-2015-3279
Fixed in a distro release EPSS 7%
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
Products: linuxfoundation cups-filters, canonical ubuntu_linux, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.5.0-16 |
| Debian 12 | cups-filters | 1.0.71-1 |
| Debian 13 | cups | 1.5.0-16 |
| Debian 13 | cups-filters | 1.0.71-1 |
| Debian 14 | cups | 1.5.0-16 |
| Debian 14 | cups-filters | 1.0.71-1 |
| Debian 6.0 | cups | 1.4.4-7+squeeze10 |
| Debian 7 | cups-filters | 1.0.18-2.1+deb7u2 |
| Debian 8 | cups-filters | 1.0.61-5+deb8u1 |
| Red Hat Enterprise Linux 7 | cups-filters | 0:1.0.35-21.el7 |
| Red Hat Enterprise Linux 7 | cups-filters-debuginfo | 0:1.0.35-21.el7 |
| Red Hat Enterprise Linux 7 | cups-filters-devel | 0:1.0.35-21.el7 |
| Red Hat Enterprise Linux 7 | cups-filters-libs | 0:1.0.35-21.el7 |
| SUSE Linux Enterprise Desktop 12 | cups-filters | 1.0.58-8.1 |
| SUSE Linux Enterprise Server 12 | cups-filters | 1.0.58-8.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | cups-filters | 1.0.58-8.1 |
| Ubuntu 14.04 LTS | cups-filters | 1.0.52-0ubuntu1.5 |
| openSUSE Tumbleweed | cups-filters | 1.8.2-1.11 |