CVE-2015-3279
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote...
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
- Record
CVE-2015-3279- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
- Record
CVE-2015-3279- Updated
- 2026-11-02
EUVDEUVD-2015-3327 No score
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
- Record
EUVD-2015-3327- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m849-v2w8-6c9x No score
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote...
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
- Record
GHSA-m849-v2w8-6c9x- Updated
- 2026-11-02
OSV No score
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
- Record
CVE-2015-3279- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-3279 No score
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
- Record
DEBIAN-CVE-2015-3279- Updated
- 2026-11-02
Show 5 moreShow less
OSVMGASA-2015-0270 No score
Updated cups-filters package fixes security vulnerability
A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filters processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to crash texttopdf or, possibly, execute arbitrary code with the privileges of the 'lp' user (CVE-2015-3258, CVE-2015-3279).
- Record
MGASA-2015-0270- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10313-1 No score
cups-filters-1.8.2-1.11 on GA media
These are all security issues fixed in the cups-filters-1.8.2-1.11 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10313-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1377-1 No score
Security update for cups-filters
cups-filters was updated to fix two security issues.
These security issues were fixed:
- CVE-2015-3279: Texttopdf integer overflow (incomplete fix for CVE-2015-3258) (bsc#937018).
- CVE-2015-3258: Texttopdf heap-based buffer overflow (bsc#936281).
- Record
SUSE-SU-2015:1377-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-3279 No score
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
- Record
UBUNTU-CVE-2015-3279- Updated
- 2026-11-02
OSVUSN-2659-1 No score
cups-filters vulnerabilities
Petr Sklenar discovered that the cups-filters texttopdf filter incorrectly handled line sizes. A remote attacker could use this issue to cause a denial of service, or possibly execute arbitrary code as the lp user. (CVE-2015-3258, CVE-2015-3279)
- Record
USN-2659-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsDebian:12 |
before 1.5.0-16 | 1.5.0-16 |
cupsDebian:13 |
before 1.5.0-16 | 1.5.0-16 |
cupsDebian:14 |
before 1.5.0-16 | 1.5.0-16 |
cups-filtersDebian:12 |
before 1.0.71-1 | 1.0.71-1 |
cups-filtersDebian:13 |
before 1.0.71-1 | 1.0.71-1 |
cups-filtersDebian:14 |
before 1.0.71-1 | 1.0.71-1 |
cupsDebian:6.0 From an advisory covering 2 CVEs |
before 1.4.4-7+squeeze10, plus listed versions 1.4.4-71.4.4-7+squeeze11.4.4-7+squeeze21.4.4-7+squeeze31.4.4-7+squeeze4 Show 5 moreShow less1.4.4-7+squeeze51.4.4-7+squeeze61.4.4-7+squeeze71.4.4-7+squeeze81.4.4-7+squeeze9 |
1.4.4-7+squeeze10 |
cups-filtersDebian:7 From an advisory covering 2 CVEs |
before 1.0.18-2.1+deb7u2, plus listed versions 1.0.18-2.11.0.18-2.1+deb7u1 |
1.0.18-2.1+deb7u2 |
cups-filtersDebian:8 From an advisory covering 2 CVEs |
before 1.0.61-5+deb8u1, plus listed versions 1.0.61-5 |
1.0.61-5+deb8u1 |
cups-filtersMageia:4 From an advisory covering 2 CVEs |
before 1.0.53-1.2.mga4 | 1.0.53-1.2.mga4 |
Show 23 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cups-filtersMageia:5 From an advisory covering 2 CVEs |
before 1.0.71-1.mga5 | 1.0.71-1.mga5 |
cups-filters-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filters-develRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filtersRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filters-libsRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filters-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filters-develRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filtersRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filters-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filters-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filters-develRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filtersRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filters-libsRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filters-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filters-develRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filtersRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filters-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.0.35-21.el7 | 0:1.0.35-21.el7 |
cups-filtersSUSE:Linux Enterprise Desktop 12 From an advisory covering 2 CVEs |
before 1.0.58-8.1 | 1.0.58-8.1 |
cups-filtersSUSE:Linux Enterprise Server 12 From an advisory covering 2 CVEs |
before 1.0.58-8.1 | 1.0.58-8.1 |
cups-filtersSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 2 CVEs |
before 1.0.58-8.1 | 1.0.58-8.1 |
cups-filtersUbuntu:14.04:LTS |
before 1.0.52-0ubuntu1.5, plus listed versions 1.0.40-0ubuntu11.0.40-0ubuntu21.0.41-0ubuntu11.0.41-21.0.42-1 Show 16 moreShow less1.0.42-21.0.43-11.0.44-11.0.44-21.0.45-11.0.46-0ubuntu11.0.47-0ubuntu11.0.48-0ubuntu11.0.48-0ubuntu21.0.49-0ubuntu11.0.50-0ubuntu11.0.51-0ubuntu11.0.52-0ubuntu11.0.52-0ubuntu1.11.0.52-0ubuntu1.21.0.52-0ubuntu1.4 |
1.0.52-0ubuntu1.5 |
cups-filtersUbuntu:14.04:LTS From an advisory covering 2 CVEs |
before 1.0.52-0ubuntu1.5, plus listed versions 1.0.40-0ubuntu11.0.40-0ubuntu21.0.41-0ubuntu11.0.41-21.0.42-1 Show 16 moreShow less1.0.42-21.0.43-11.0.44-11.0.44-21.0.45-11.0.46-0ubuntu11.0.47-0ubuntu11.0.48-0ubuntu11.0.48-0ubuntu21.0.49-0ubuntu11.0.50-0ubuntu11.0.51-0ubuntu11.0.52-0ubuntu11.0.52-0ubuntu1.11.0.52-0ubuntu1.21.0.52-0ubuntu1.4 |
1.0.52-0ubuntu1.5 |
cups-filtersopenSUSE:Tumbleweed From an advisory covering 13 CVEs |
before 1.8.2-1.11 | 1.8.2-1.11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-3279 is a high vulnerability (CVSS 7.5) in Linuxfoundation Cups-filters, published July 3, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.64%, the 93rd percentile. Fixed in cups 1.5.0-16.
References
ubuntu.com/usn/usn-2659-1
security.gentoo.org/glsa/201510-08
openwall.com/lists/oss-security/2015/07/03/5
bugzilla.redhat.com/show_bug.cgi?id=1238990
bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7365
Show 43 moreShow less
oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
lists.opensuse.org/opensuse-updates/2015-07/msg00033.html
debian.org/security/2015/dsa-3303
securityfocus.com/bid/75557
rhn.redhat.com/errata/RHSA-2015-2360.html
nvd.nist.gov/vuln/detail/CVE-2015-3279
github.com/advisories/GHSA-m849-v2w8-6c9x
security-tracker.debian.org/tracker/CVE-2015-3279
advisories.mageia.org/MGASA-2015-0270.html
bugs.mageia.org/show_bug.cgi?id=16221
access.redhat.com/errata/RHSA-2015:2360
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2360.json
cve.org/CVERecord?id=CVE-2015-3258
suse.com/support/update/announcement/2015/suse-su-20151377-1
bugzilla.suse.com/936281