CVE-2015-8327
UnknownEPSS 10.17%
Last modified
CVE-2015-8327 is a vulnerability of currently unknown severity. Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.. EPSS estimates a 10.17% chance of exploitation in the next 30 days.
Description
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Enterprise Linux Desktop | 6.0 |
| Redhat | Enterprise Linux Hpc Node | 6.0 |
| Redhat | Enterprise Linux Server | 6.0 |
| Redhat | Enterprise Linux Server Eus | 6.7.z |
| Redhat | Enterprise Linux Workstation | 6.0 |
| Linuxfoundation | Foomatic-Filters | 4.0.0 |
| Linuxfoundation | Foomatic-Filters | 4.0.1 |
| Linuxfoundation | Foomatic-Filters | 4.0.2 |
| Linuxfoundation | Foomatic-Filters | 4.0.3 |
| Linuxfoundation | Foomatic-Filters | 4.0.4 |
| Linuxfoundation | Foomatic-Filters | 4.0.5 |
| Linuxfoundation | Foomatic-Filters | 4.0.6 |
| Linuxfoundation | Foomatic-Filters | 4.0.7 |
| Linuxfoundation | Foomatic-Filters | 4.0.8 |
| Linuxfoundation | Foomatic-Filters | 4.0.9 |
| Linuxfoundation | Foomatic-Filters | 4.0.10 |
| Linuxfoundation | Foomatic-Filters | 4.0.11 |
| Linuxfoundation | Foomatic-Filters | 4.0.12 |
| Linuxfoundation | Foomatic-Filters | 4.0.13 |
| Linuxfoundation | Foomatic-Filters | 4.0.14 |
| Linuxfoundation | Foomatic-Filters | 4.0.15 |
| Linuxfoundation | Foomatic-Filters | 4.0.16 |
| Linuxfoundation | Foomatic-Filters | 4.0.17 |
| Canonical | Ubuntu Linux | 12.04 |
| Canonical | Ubuntu Linux | 14.04 |
| Canonical | Ubuntu Linux | 15.04 |
| Canonical | Ubuntu Linux | 15.10 |
| Linuxfoundation | Cups-Filters | 1.0.42 |
| Linuxfoundation | Cups-Filters | 1.0.43 |
| Linuxfoundation | Cups-Filters | 1.0.44 |
| Linuxfoundation | Cups-Filters | 1.0.45 |
| Linuxfoundation | Cups-Filters | 1.0.46 |
| Linuxfoundation | Cups-Filters | 1.0.47 |
| Linuxfoundation | Cups-Filters | 1.0.48 |
| Linuxfoundation | Cups-Filters | 1.0.49 |
| Linuxfoundation | Cups-Filters | 1.0.50 |
| Linuxfoundation | Cups-Filters | 1.0.51 |
| Linuxfoundation | Cups-Filters | 1.0.52 |
| Linuxfoundation | Cups-Filters | 1.0.53 |
| Linuxfoundation | Cups-Filters | 1.0.54 |
| Linuxfoundation | Cups-Filters | 1.0.55 |
| Linuxfoundation | Cups-Filters | 1.0.56 |
| Linuxfoundation | Cups-Filters | 1.0.57 |
| Linuxfoundation | Cups-Filters | 1.0.58 |
| Linuxfoundation | Cups-Filters | 1.0.59 |
| Linuxfoundation | Cups-Filters | 1.0.60 |
| Linuxfoundation | Cups-Filters | 1.0.61 |
| Linuxfoundation | Cups-Filters | 1.0.62 |
| Linuxfoundation | Cups-Filters | 1.0.63 |
| Linuxfoundation | Cups-Filters | 1.0.64 |
Showing 50 of 64 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-8327?
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.
How severe is CVE-2015-8327?
Severity scoring for CVE-2015-8327 is pending analysis. The EPSS model estimates a 10.17% probability of exploitation in the next 30 days.
How do I fix CVE-2015-8327?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-8319Heap-based buffer overflow in the HIFI driver in Huawei P8 s…
- CVE-2015-8320Apache Cordova-Android before 3.7.0 improperly generates ran…
- CVE-2015-8322NetApp OnCommand System Manager 8.3.x before 8.3.2 allows re…
- CVE-2015-8324The ext4 implementation in the Linux kernel before 2.6.34 do…
- CVE-2015-8325The do_setup_env function in session.c in sshd in OpenSSH th…7.8
- CVE-2015-8326The IPTables-Parse module before 1.6 for Perl allows local u…
- CVE-2015-8328Unspecified vulnerability in the NVAPI support layer in the …
- CVE-2015-8329SAP Manufacturing Integration and Intelligence (aka MII, for…
- CVE-2015-8330The PCo agent in SAP Plant Connectivity (PCo) allows remote …
- CVE-2015-8331The Operation and Maintenance Unit (OMU) in Huawei VCN500 wi…
- CVE-2015-8332Huawei Video Content Management (VCM) before V100R001C10SPC0…
- CVE-2015-8333The Operation and Maintenance Unit (OMU) in Huawei VCN500 wi…
Are you affected by CVE-2015-8327?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST