CVE-2015-8327
Fixed in a distro release EPSS 11%
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.
Products: redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation, linuxfoundation foomatic-filters, canonical ubuntu_linux, linuxfoundation cups-filters, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups-filters | 1.2.0-1 |
| Debian 12 | foomatic-filters | 4.0.17-7 |
| Debian 13 | cups-filters | 1.2.0-1 |
| Debian 13 | foomatic-filters | 4.0.17-7 |
| Debian 14 | cups-filters | 1.2.0-1 |
| Debian 14 | foomatic-filters | 4.0.17-7 |
| Debian 6.0 | foomatic-filters | 4.0.5-6+squeeze2+deb6u11 |
| Debian 7 | foomatic-filters | 4.0.17-1+deb7u1 |
| Debian 8 | cups-filters | 1.0.61-5+deb8u2 |
| Debian 8 | foomatic-filters | 4.0.17-5+deb8u1 |
| Red Hat Enterprise Linux 6 | foomatic | 0:4.0.4-5.el6_7 |
| Red Hat Enterprise Linux 6 | foomatic-debuginfo | 0:4.0.4-5.el6_7 |
| SUSE Linux Enterprise Desktop 11 SP3 | foomatic-filters | 3.0.2-269.39.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | foomatic-filters | 3.0.2-269.39.1 |
| SUSE Linux Enterprise Desktop 12 | cups-filters | 1.0.58-13.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | cups-filters | 1.0.58-13.1 |
| SUSE Linux Enterprise Server 11 SP3 | foomatic-filters | 3.0.2-269.39.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | foomatic-filters | 3.0.2-269.39.1 |
| SUSE Linux Enterprise Server 11 SP4 | foomatic-filters | 3.0.2-269.39.1 |
| SUSE Linux Enterprise Server 12 | cups-filters | 1.0.58-13.1 |
| SUSE Linux Enterprise Server 12 SP1 | cups-filters | 1.0.58-13.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | foomatic-filters | 3.0.2-269.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | foomatic-filters | 3.0.2-269.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | cups-filters | 1.0.58-13.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | cups-filters | 1.0.58-13.1 |
| Ubuntu 14.04 LTS | cups-filters | 1.0.52-0ubuntu1.6 |
| Ubuntu 14.04 LTS | foomatic-filters | 4.0.17-1+deb7u1ubuntu0.14.04.1 |
| openSUSE Tumbleweed | cups-filters | 1.8.2-1.11 |