CVE-2015-1158

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

29.91%

Published

Jun 26, 2015

Modified

May 6, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBCUPS < 2.0.3 - Remote Command Execution Exploit-DBCUPS < 2.0.3 - Multiple Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.

Weaknesses (CWE)

CWE-254

Affected Products (1)

cups · cupsvulnerable

References (20)

http://googleprojectzero.blogspot.in/2015/06/owning-internet-printing-case-study-in.html

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10702

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html

http://rhn.redhat.com/errata/RHSA-2015-1123.html

http://www.cups.org/blog.php?L1082

Vendor Advisory

http://www.debian.org/security/2015/dsa-3283

KEV Catalog EPSS Scores Vendors All CVEs