CVE-2015-1158

Published: 9 June 2015

The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.

Priority

Status

Package	Release	Status
cups Launchpad, Ubuntu, Debian	vivid	Released (2.0.2-1ubuntu3.1)
	upstream	Needs triage
	precise	Released (1.5.3-0ubuntu8.7)
	trusty	Does not exist (trusty was released [1.7.2-0ubuntu1.6])
	utopic	Released (1.7.5-3ubuntu3.2)

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1158
http://www.kb.cert.org/vuls/id/810572
https://ubuntu.com/security/notices/USN-2629-1
NVD
Launchpad
Debian

Bugs

https://www.cups.org/str.php?L4609

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›