CVE-2015-1158

The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
Affected Products (NVD)
VendorProductVersion
cupscups
𝑥
≤ 2.0.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
cups
bookworm
2.4.2-3+deb12u7
fixed
bookworm (security)
2.4.2-3+deb12u8
fixed
bullseye
2.3.3op2-3+deb11u8
fixed
bullseye (security)
2.3.3op2-3+deb11u9
fixed
sid
2.4.10-2
fixed
trixie
2.4.10-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
cups
precise
Fixed 1.5.3-0ubuntu8.7
released
trusty
Fixed 1.7.2-0ubuntu1.6
released
utopic
Fixed 1.7.5-3ubuntu3.2
released
vivid
Fixed 2.0.2-1ubuntu3.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
cups
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 12
1.7.5-9.1
fixed
suse enterprise sap 12 SP5
1.7.5-20.23.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 12
1.7.5-9.1
fixed
suse enterprise server 12 SP5
1.7.5-20.23.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
cups-client
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 12
1.7.5-9.1
fixed
suse enterprise sap 12 SP5
1.7.5-20.23.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 12
1.7.5-9.1
fixed
suse enterprise server 12 SP5
1.7.5-20.23.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
cups-config
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
cups-devel
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
cups-libs
suse enterprise sap 12
1.7.5-9.1
fixed
suse enterprise sap 12 SP5
1.7.5-20.23.1
fixed
suse enterprise server 12
1.7.5-9.1
fixed
suse enterprise server 12 SP5
1.7.5-20.23.1
fixed
cups-libs-32bit
suse enterprise sap 12
1.7.5-9.1
fixed
suse enterprise sap 12 SP5
1.7.5-20.23.1
fixed
suse enterprise server 12
1.7.5-9.1
fixed
suse enterprise server 12 SP5
1.7.5-20.23.1
fixed
cups154
suse enterprise sap 12
1.5.4-9.1
fixed
suse enterprise sap 12 SP3
1.5.4-9.1
fixed
suse enterprise sap 12 SP4
1.5.4-9.1
fixed
suse enterprise sap 12 SP5
1.5.4-9.1
fixed
suse enterprise server 12
1.5.4-9.1
fixed
suse enterprise server 12 SP3
1.5.4-9.1
fixed
suse enterprise server 12 SP4
1.5.4-9.1
fixed
suse enterprise server 12 SP5
1.5.4-9.1
fixed
cups154-client
suse enterprise sap 12
1.5.4-9.1
fixed
suse enterprise sap 12 SP3
1.5.4-9.1
fixed
suse enterprise sap 12 SP4
1.5.4-9.1
fixed
suse enterprise sap 12 SP5
1.5.4-9.1
fixed
suse enterprise server 12
1.5.4-9.1
fixed
suse enterprise server 12 SP3
1.5.4-9.1
fixed
suse enterprise server 12 SP4
1.5.4-9.1
fixed
suse enterprise server 12 SP5
1.5.4-9.1
fixed
cups154-filters
suse enterprise sap 12
1.5.4-9.1
fixed
suse enterprise sap 12 SP3
1.5.4-9.1
fixed
suse enterprise sap 12 SP4
1.5.4-9.1
fixed
suse enterprise sap 12 SP5
1.5.4-9.1
fixed
suse enterprise server 12
1.5.4-9.1
fixed
suse enterprise server 12 SP3
1.5.4-9.1
fixed
suse enterprise server 12 SP4
1.5.4-9.1
fixed
suse enterprise server 12 SP5
1.5.4-9.1
fixed
cups154-libs
suse enterprise sap 12
1.5.4-9.1
fixed
suse enterprise sap 12 SP3
1.5.4-9.1
fixed
suse enterprise sap 12 SP4
1.5.4-9.1
fixed
suse enterprise sap 12 SP5
1.5.4-9.1
fixed
suse enterprise server 12
1.5.4-9.1
fixed
suse enterprise server 12 SP3
1.5.4-9.1
fixed
suse enterprise server 12 SP4
1.5.4-9.1
fixed
suse enterprise server 12 SP5
1.5.4-9.1
fixed
libcups2
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
libcups2-32bit
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
libcupscgi1
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
libcupsimage2
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
libcupsmime1
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
libcupsppdc1
suse enterprise desktop 15
2.2.7-1.24
fixed
suse enterprise desktop 15 SP1
2.2.7-3.11.7
fixed
suse enterprise desktop 15 SP2
2.2.7-3.17.1
fixed
suse enterprise desktop 15 SP3
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP4
2.2.7-3.26.1
fixed
suse enterprise desktop 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise desktop 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise desktop 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise sap 15
2.2.7-1.24
fixed
suse enterprise sap 15 SP1
2.2.7-3.11.7
fixed
suse enterprise sap 15 SP2
2.2.7-3.17.1
fixed
suse enterprise sap 15 SP3
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP4
2.2.7-3.26.1
fixed
suse enterprise sap 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise sap 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise sap 15 SP7
2.2.7-150000.3.65.1
fixed
suse enterprise server 15
2.2.7-1.24
fixed
suse enterprise server 15 SP1
2.2.7-3.11.7
fixed
suse enterprise server 15 SP2
2.2.7-3.17.1
fixed
suse enterprise server 15 SP3
2.2.7-3.26.1
fixed
suse enterprise server 15 SP4
2.2.7-3.26.1
fixed
suse enterprise server 15 SP5
2.2.7-150000.3.40.1
fixed
suse enterprise server 15 SP6
2.2.7-150000.3.54.1
fixed
suse enterprise server 15 SP7
2.2.7-150000.3.65.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
cups
RHEL 6
1:1.4.2-67.el6_6.1
fixed
RHEL 7
1:1.6.3-17.el7_1.1
fixed
cups-client
RHEL 7
1:1.6.3-17.el7_1.1
fixed
cups-devel
RHEL 6
1:1.4.2-67.el6_6.1
fixed
RHEL 7
1:1.6.3-17.el7_1.1
fixed
cups-filesystem
RHEL 7
1:1.6.3-17.el7_1.1
fixed
cups-ipptool
RHEL 7
1:1.6.3-17.el7_1.1
fixed
cups-libs
RHEL 6
1:1.4.2-67.el6_6.1
fixed
RHEL 7
1:1.6.3-17.el7_1.1
fixed
cups-lpd
RHEL 6
1:1.4.2-67.el6_6.1
fixed
RHEL 7
1:1.6.3-17.el7_1.1
fixed
cups-php
RHEL 6
1:1.4.2-67.el6_6.1
fixed
Common Weakness Enumeration
References