Every CVE Search/ Get API key

CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0...

7.5 HighFix available

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Exploit likelihood

10.6%Up 6.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Record
CVE-2015-8327
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Record
CVE-2015-8327
Updated
2026-11-02
EUVDEUVD-2015-8211 No score

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Record
EUVD-2015-8211
Updated
2026-11-03
GitHub AdvisoriesGHSA-cfgh-jg4g-q29h No score

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0...

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Record
GHSA-cfgh-jg4g-q29h
Updated
2026-11-02
OSV No score

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Record
CVE-2015-8327
Updated
2026-11-02
OSVDEBIAN-CVE-2015-8327 No score

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Record
DEBIAN-CVE-2015-8327
Updated
2026-11-02
Show 6 moreShow less
OSVMGASA-2015-0465 No score

Updated cups-filters packages fix security vulnerability

Michal Kowalczyk discovered that missing input sanitising in the foomatic-rip print filter might result in the execution of arbitrary commands (CVE-2015-8327).

Record
MGASA-2015-0465
Updated
2026-11-02
OSVopenSUSE-SU-2024:10313-1 No score

cups-filters-1.8.2-1.11 on GA media

These are all security issues fixed in the cups-filters-1.8.2-1.11 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10313-1
Updated
2026-11-02
OSVSUSE-SU-2016:0092-1 No score

Security update for cups-filters

This update fixes the following security issue:

CVE-2015-8327 adds backtick and semicolon to the list of illegal shell escape characters (bsc#957531).

Record
SUSE-SU-2016:0092-1
Updated
2026-11-02
OSVSUSE-SU-2016:0112-1 No score

Security update for foomatic-filters

This update fixes the following security issues:

CVE-2015-8327: adds backtick and semicolon to the list of illegal shell escape characters (bsc#957531). CVE-2015-8560: fixed code execution via improper escaping of ; (bsc#957531).

Record
SUSE-SU-2016:0112-1
Updated
2026-11-02
OSVUBUNTU-CVE-2015-8327 No score

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Record
UBUNTU-CVE-2015-8327
Updated
2026-11-02
OSVUSN-2831-1 No score

cups-filters vulnerability

Michal Kowalczyk discovered that the cups-filters foomatic-rip filter incorrectly stripped shell escape characters. A remote attacker could possibly use this issue to execute arbitrary code as the lp user.

Record
USN-2831-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cups-filters
Debian:12
 before 1.2.0-1
1.2.0-1
cups-filters
Debian:13
 before 1.2.0-1
1.2.0-1
cups-filters
Debian:14
 before 1.2.0-1
1.2.0-1
foomatic-filters
Debian:12
 before 4.0.17-7
4.0.17-7
foomatic-filters
Debian:13
 before 4.0.17-7
4.0.17-7
foomatic-filters
Debian:14
 before 4.0.17-7
4.0.17-7
foomatic-filters
Debian:6.0
 before 4.0.5-6+squeeze2+deb6u11, plus listed versions
4.0.5-64.0.5-6+squeeze14.0.5-6+squeeze2
4.0.5-6+squeeze2+deb6u11
cups-filters
Debian:8
 before 1.0.61-5+deb8u2, plus listed versions
1.0.61-51.0.61-5+deb8u1
1.0.61-5+deb8u2
foomatic-filters
Debian:7
From an advisory covering 2 CVEs
 before 4.0.17-1+deb7u1, plus listed versions
4.0.17-1
4.0.17-1+deb7u1
foomatic-filters
Debian:8
From an advisory covering 2 CVEs
 before 4.0.17-5+deb8u1, plus listed versions
4.0.17-5
4.0.17-5+deb8u1
Show 25 moreShow less
Affected packages
PackageAffectedFixed
cups-filters
Mageia:5
 before 1.0.71-1.1.mga5
1.0.71-1.1.mga5
foomatic
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:4.0.4-5.el6_7
0:4.0.4-5.el6_7
foomatic-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:4.0.4-5.el6_7
0:4.0.4-5.el6_7
foomatic
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:4.0.4-5.el6_7
0:4.0.4-5.el6_7
foomatic-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:4.0.4-5.el6_7
0:4.0.4-5.el6_7
foomatic
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:4.0.4-5.el6_7
0:4.0.4-5.el6_7
foomatic-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:4.0.4-5.el6_7
0:4.0.4-5.el6_7
foomatic
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:4.0.4-5.el6_7
0:4.0.4-5.el6_7
foomatic-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:4.0.4-5.el6_7
0:4.0.4-5.el6_7
cups-filters
SUSE:Linux Enterprise Desktop 12
 before 1.0.58-13.1
1.0.58-13.1
cups-filters
SUSE:Linux Enterprise Desktop 12 SP1
 before 1.0.58-13.1
1.0.58-13.1
cups-filters
SUSE:Linux Enterprise Server 12
 before 1.0.58-13.1
1.0.58-13.1
cups-filters
SUSE:Linux Enterprise Server for SAP Applications 12
 before 1.0.58-13.1
1.0.58-13.1
cups-filters
SUSE:Linux Enterprise Server 12 SP1
 before 1.0.58-13.1
1.0.58-13.1
cups-filters
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.0.58-13.1
1.0.58-13.1
foomatic-filters
SUSE:Linux Enterprise Desktop 11 SP3
From an advisory covering 2 CVEs
 before 3.0.2-269.39.1
3.0.2-269.39.1
foomatic-filters
SUSE:Linux Enterprise Desktop 11 SP4
From an advisory covering 2 CVEs
 before 3.0.2-269.39.1
3.0.2-269.39.1
foomatic-filters
SUSE:Linux Enterprise Server 11 SP3
From an advisory covering 2 CVEs
 before 3.0.2-269.39.1
3.0.2-269.39.1
foomatic-filters
SUSE:Linux Enterprise Server 11 SP3-TERADATA
From an advisory covering 2 CVEs
 before 3.0.2-269.39.1
3.0.2-269.39.1
foomatic-filters
SUSE:Linux Enterprise Server for SAP Applications 11 SP3
From an advisory covering 2 CVEs
 before 3.0.2-269.39.1
3.0.2-269.39.1
foomatic-filters
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 2 CVEs
 before 3.0.2-269.39.1
3.0.2-269.39.1
foomatic-filters
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 2 CVEs
 before 3.0.2-269.39.1
3.0.2-269.39.1
cups-filters
Ubuntu:14.04:LTS
 before 1.0.52-0ubuntu1.6, plus listed versions
1.0.40-0ubuntu11.0.40-0ubuntu21.0.41-0ubuntu11.0.41-21.0.42-1
Show 17 moreShow less
1.0.42-21.0.43-11.0.44-11.0.44-21.0.45-11.0.46-0ubuntu11.0.47-0ubuntu11.0.48-0ubuntu11.0.48-0ubuntu21.0.49-0ubuntu11.0.50-0ubuntu11.0.51-0ubuntu11.0.52-0ubuntu11.0.52-0ubuntu1.11.0.52-0ubuntu1.21.0.52-0ubuntu1.41.0.52-0ubuntu1.5
1.0.52-0ubuntu1.6
foomatic-filters
Ubuntu:14.04:LTS
 before 4.0.17-1+deb7u1ubuntu0.14.04.1, plus listed versions
4.0.17-1ubuntu1
4.0.17-1+deb7u1ubuntu0.14.04.1
cups-filters
openSUSE:Tumbleweed
From an advisory covering 13 CVEs
 before 1.8.2-1.11
1.8.2-1.11

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-8327 is a high vulnerability (CVSS 7.5) in Linuxfoundation Cups-filters, published December 2, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.6%, the 95th percentile. Fixed in cups-filters 1.2.0-1.

References

Show 45 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open