CVE-2015-1158

The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

29.73% chance of exploitation in the next 30 days, 98th percentile

Published

2015-06-26

Updated

2024-08-06

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/37336
• https://www.exploit-db.com/exploits/41233

Security advisories

• http://www.cups.org/blog.php?L1082
• https://www.cups.org/str.php?L4609
• http://www.kb.cert.org/vuls/id/810572
• http://www.securityfocus.com/bid/75098
• http://www.ubuntu.com/usn/USN-2629-1

References

• CVE Record
• NVD entry