GNU a2ps vulnerabilities

5 CVEs affecting GNU a2ps, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-8107, published 2017-04-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-1170, published 2005-01-10. High severity, CVSS 10.0. EPSS: 16% chance of exploitation in the next 30 days. a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
CVE-2015-8107, published 2017-04-13. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.
CVE-2014-0466, published 2014-04-03. Medium severity, CVSS 6.8. EPSS: 2.3% chance of exploitation in the next 30 days. The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted…
CVE-2001-1593, published 2014-04-05. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink…
CVE-2004-1377, published 2004-12-27. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.