Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2838-1
HistoryDec 16, 2015 - 12:00 a.m.

cups-filters vulnerability

2015-12-1600:00:00
ubuntu.com
35

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

7.9

Confidence

High

EPSS

0.009

Percentile

83.0%

JSON

Releases

  • Ubuntu 15.10
  • Ubuntu 15.04
  • Ubuntu 14.04 ESM

Packages

  • cups-filters - OpenPrinting CUPS Filters

Details

Adam Chester discovered that the cups-filters foomatic-rip filter
incorrectly stripped shell escape characters. A remote attacker could
possibly use this issue to execute arbitrary code as the lp user.

Related

nessus 20
osv 1
debian 5
openvas 17
fedora 2
freebsd 1
ubuntu 1
mageia 1
prion 1
f5 1
ubuntucve 1
cvelist 1
amazon 1
debiancve 1
nvd 1
cve 1
centos 1
redhat 1
oraclelinux 1
veracode 2
nessus
nessus
Fedora 22 : cups-filters-1.4.0-1.fc22 (2015-998911cf3f)
2016-03-04 00:00:00
Debian DLA-371-1 : foomatic-filters security update
2015-12-21 00:00:00
FreeBSD : cups-filters -- code execution (7329938b-a4e6-11e5-b864-14dae9d210b8)
2015-12-18 00:00:00
osv
osv
foomatic-filters - security update
2015-12-18 00:00:00
debian
debian
[SECURITY] [DSA 3419-1] cups-filters security update
2015-12-15 17:09:33
[SECURITY] [DLA 371-1] foomatic-filters security update
2015-12-18 07:06:57
[SECURITY] [DSA 3419-1] cups-filters security update
2015-12-15 17:09:33
openvas
openvas
Ubuntu: Security Advisory (USN-2838-2)
2015-12-17 00:00:00
Debian Security Advisory DSA 3419-1 (cups-filters - security update)
2015-12-15 00:00:00
Mageia: Security Advisory (MGASA-2015-0476)
2015-12-17 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: cups-filters-1.4.0-1.fc22
2015-12-30 17:51:54
[SECURITY] Fedora 23 Update: cups-filters-1.4.0-1.fc23
2015-12-19 18:30:13
freebsd
freebsd
cups-filters -- code execution
2015-12-12 00:00:00
ubuntu
ubuntu
foomatic-filters vulnerability
2015-12-16 00:00:00
mageia
mageia
Updated cups-filters packages fix CVE-2015-8560
2015-12-17 00:01:04
prion
prion
Input validation
2016-04-14 14:59:00
f5
f5
K45213552 : cups-filters vulnerabilities CVE-2015-8327 and CVE-2015-8560
2017-09-13 00:00:00
ubuntucve
ubuntucve
CVE-2015-8560
2015-12-15 00:00:00
cvelist
cvelist
CVE-2015-8560
2016-04-14 14:00:00
amazon
amazon
Medium: foomatic
2016-04-21 16:00:00
debiancve
debiancve
CVE-2015-8560
2016-04-14 14:59:06
nvd
nvd
CVE-2015-8560
2016-04-14 14:59:06
cve
cve
CVE-2015-8560
2016-04-14 14:59:06
centos
centos
foomatic security update
2016-03-23 13:11:25
redhat
redhat
(RHSA-2016:0491) Moderate: foomatic security update
2016-03-22 00:00:00
oraclelinux
oraclelinux
foomatic security update
2016-03-22 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:28:06
Arbitrary Code Execution
2019-05-02 05:28:05

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

7.9

Confidence

High

EPSS

0.009

Percentile

83.0%

JSON
Related for USN-2838-1
nessus20osv1debian5openvas17fedora2freebsd1ubuntu1mageia1prion1f51ubuntucve1cvelist1amazon1debiancve1nvd1cve1centos1redhat1oraclelinux1veracode2