CVE-2015-8560

High

Published: 14/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2015-8560 describes an incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters before version 1.4.0 and in foomatic-filters in Foomatic 4.0.x. This allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job.

Risk Assessment

An attacker can exploit this vulnerability to execute commands remotely, potentially leading to system compromise or data leakage. Organizations should be aware of the risks associated with unauthorized access to printing systems.

Recommendation

It is recommended to upgrade to cups-filters version 1.4.0 or later and Foomatic 4.0.x to mitigate this vulnerability. Additionally, implementing further security measures in the printing system is advisable.

Other vulnerabilities in cups-filters, foomatic-filters

CVE-2015-8327High
CVE-2015-8327 describes an incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters before version 1.2.0 and in foomatic-filters in Foomatic 4.0.x. This allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Original NVD description (English source)

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.