Linuxfoundation Cups-Filters vulnerabilities

14 CVEs affecting Linuxfoundation Cups-Filters, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-24805, published 2023-05-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-8327, published 2015-12-17. High severity, CVSS 7.5. EPSS: 10.6% chance of exploitation in the next 30 days. Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via `…
CVE-2015-3258, published 2015-07-14. High severity, CVSS 7.5. EPSS: 8.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly…
CVE-2015-3279, published 2015-07-14. High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days. Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line…
CVE-2015-8560, published 2016-04-14. High severity, CVSS 7.3. EPSS: 5.3% chance of exploitation in the next 30 days. Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a…
CVE-2023-24805, published 2023-05-17. High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days. cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. If you use the Backend Error Handler (beh) to…
CVE-2013-6473, published 2014-03-14. Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote attackers to execute arbitrary code via a large (1) page or (2) line in a URF file.
CVE-2013-6475, published 2014-03-14. Medium severity, CVSS 6.8. EPSS: 3.2% chance of exploitation in the next 30 days. Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a…
CVE-2013-6474, published 2014-03-14. Medium severity, CVSS 6.8. EPSS: 3.1% chance of exploitation in the next 30 days. Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file.
CVE-2014-4338, published 2014-06-22. Medium severity, CVSS 4.0. EPSS: 3% chance of exploitation in the next 30 days. cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow…
CVE-2015-2265, published 2015-03-24. High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days. The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the (1) model or…

Latest

CVE-2014-4337, published 2014-06-22. Medium severity, CVSS 4.3. EPSS: 2.9% chance of exploitation in the next 30 days. The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service (out-of-bounds read and application crash)…
CVE-2014-4336, published 2014-06-22. Medium severity, CVSS 5.8. EPSS: 1.1% chance of exploitation in the next 30 days. The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the host…
CVE-2014-2707, published 2014-04-17. High severity, CVSS 8.3. EPSS: 1.2% chance of exploitation in the next 30 days. cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to "System V interface scripts…