PT-2015-1356 · Apple+5 · Cups+5

0X00String · Published 2015-06-09 · Updated 2024-06-15 · CVE-2015-1158

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CUPS versions prior to 2.0.3

Description The issue is related to the add job function in the scheduler/ipp.c file of the CUPS server, which performs incorrect free operations for multiple-value job-originating-host-name attributes. This allows remote attackers to trigger data corruption for reference-counted strings via crafted IPP requests, such as IPP CREATE JOB or IPP PRINT JOB requests. The exploitation of this issue can lead to the modification of the device's configuration file or the execution of arbitrary code.

Recommendations For versions prior to 2.0.3, update to version 2.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the add job function in the scheduler/ipp.c file until a patch is available. Avoid using the IPP CREATE JOB and IPP PRINT JOB requests in the affected API endpoints until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-254

Related Identifiers

ALT-PU-2015-2012

BDU:2015-10444

CESA-2015_1123

CVE-2015-1158

DLA-239-1

DSA-3283-1

MGASA-2015-0247

OPENSUSE-SU-2015_1056-1

OPENSUSE-SU-2024:10075-1

RHSA-2015:1123

RHSA-2015_1123

SUSE-SU-2015:1041-1

SUSE-SU-2015:1044-1

SUSE-SU-2015:1044-2

USN-2629-1

Affected Products

Alt Linux

Cups

Centos

Red Hat

Suse

Ubuntu

References · 97

• 🔥 https://github.com/0x00string/oldays/blob/master/CVE-2015-1158.py · Exploit
• 🔥 https://github.com/p1ckzi/CVE-2012-5519 · Exploit
• 🔥 https://exploit-db.com/exploits/37336 · Exploit
• 🔥 https://exploit-db.com/exploits/41233 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-1158 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1159 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9679 · Security Note
• https://advisories.mageia.org/MGASA-2015-0247.html · Security Note
• http://ubuntu.com/usn/USN-2629-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-1158 · Security Note
• https://ubuntu.com/security/CVE-2015-1158 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1159 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10516 · Security Note
• http://cups.org/blog.php?L1082 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:1041-1 · Vendor Advisory