CVE-2015-8327
Description
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.
No summary for this CVE yet.
CVSS Vector Breakdown
Exploitability
AV:NAccess VectorNetwork
AC:LAccess ComplexityLow
Au:NAuthenticationNone
Impact
C:PConfidentialityPartial
I:PIntegrityPartial
A:PAvailabilityPartial
Weaknesses
Affected Products
redhat
commercial·USaka red hat
linuxfoundation
oss-project·USaka pytorch, yocto, everest
Canonical Ltd.
commercial·GBaka canonical
The Linux Foundation
oss-project·USaka linuxfoundation.org, linux foundation
debian
oss-project·GBaka debian gnu/linux
and 5 more affected products View all →
Exploitability
Official Patch Available
References
http://www.ubuntu.com/usn/USN-2831-1
ubuntu.com
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
oracle.com
http://www.securityfocus.com/bid/78524
securityfocus.com
and 17 more references View all →
Unlock Complete Vulnerability Intelligence
Get the full picture for CVE-2015-8327 and every CVE in our database. Create a free account — no credit card required.
Create Free AccountPlain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows
