{"id": "DEBIAN:DSA-3303-1:EF715", "bulletinFamily": "unix", "title": "[SECURITY] [DSA 3303-1] cups-filters security update", "description": "- -------------------------------------------------------------------------\nDebian Security Advisory DSA-3303-1 security@debian.org\nhttps://www.debian.org/security/ Alessandro Ghedini\nJuly 07, 2015 https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage : cups-filters\nCVE ID : CVE-2015-3258 CVE-2015-3279\n\nIt was discovered that the texttopdf utility, part of cups-filters, was\nsusceptible to multiple heap-based buffer overflows due to improper\nhandling of print jobs with a specially crafted line size. This could\nallow remote attackers to crash texttopdf or possibly execute arbitrary\ncode.\n\nFor the oldstable distribution (wheezy), these problems have been fixed\nin version 1.0.18-2.1+deb7u2.\n\nFor the stable distribution (jessie), these problems have been fixed in\nversion 1.0.61-5+deb8u1.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 1.0.71-1.\n\nWe recommend that you upgrade your cups-filters packages.\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n", "published": "2015-07-07T13:32:24", "modified": "2015-07-07T13:32:24", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "href": "https://lists.debian.org/debian-security-announce/debian-security-announce-2015/msg00199.html", "reporter": "Debian", "references": [], "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "type": "debian", "lastseen": "2020-08-12T01:03:11", "edition": 9, "viewCount": 0, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2015-3279", "CVE-2015-3258"]}, {"type": "ubuntu", "idList": ["USN-2659-1"]}, {"type": "openvas", "idList": ["OPENVAS:703303", "OPENVAS:1361412562310703303", "OPENVAS:1361412562310871485", "OPENVAS:1361412562310122745", "OPENVAS:1361412562310869751", "OPENVAS:1361412562310842266", "OPENVAS:1361412562310869772", "OPENVAS:1361412562310121421", "OPENVAS:1361412562310130108"]}, {"type": "gentoo", "idList": ["GLSA-201510-08"]}, {"type": "redhat", "idList": ["RHSA-2015:2360"]}, {"type": "nessus", "idList": ["CENTOS_RHSA-2015-2360.NASL", "FEDORA_2015-11163.NASL", "UBUNTU_USN-2659-1.NASL", "GENTOO_GLSA-201510-08.NASL", "DEBIAN_DLA-314.NASL", "ORACLELINUX_ELSA-2015-2360.NASL", "SL_20151119_CUPS_FILTERS_ON_SL7_X.NASL", "DEBIAN_DSA-3303.NASL", "SUSE_SU-2015-1377-1.NASL", "REDHAT-RHSA-2015-2360.NASL"]}, {"type": "fedora", "idList": ["FEDORA:407E160BD9AE", "FEDORA:2B05360E53FF"]}, {"type": "debian", "idList": ["DEBIAN:DLA-314-1:D7B69"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:14577", "SECURITYVULNS:DOC:32311"]}, {"type": "centos", "idList": ["CESA-2015:2360"]}, {"type": "oraclelinux", "idList": ["ELSA-2015-2360"]}, {"type": "freebsd", "idList": ["BF1D9331-21B6-11E5-86FF-14DAE9D210B8", "B19DA422-1E02-11E5-B43D-002590263BF5"]}], "modified": "2020-08-12T01:03:11", "rev": 2}, "score": {"value": 7.0, "vector": "NONE", "modified": "2020-08-12T01:03:11", "rev": 2}, "vulnersScore": 7.0}, "affectedPackage": [{"OS": "Debian", "OSVersion": "8", "arch": "all", "operator": "lt", "packageFilename": "cups-filters-core-drivers_1.0.61-5+deb8u1_all.deb", "packageName": "cups-filters-core-drivers", "packageVersion": "1.0.61-5+deb8u1"}, {"OS": "Debian", "OSVersion": "8", "arch": "all", "operator": "lt", "packageFilename": "libfontembed-dev_1.0.61-5+deb8u1_all.deb", "packageName": "libfontembed-dev", "packageVersion": "1.0.61-5+deb8u1"}, {"OS": "Debian", "OSVersion": "8", "arch": "all", "operator": "lt", "packageFilename": "libcupsfilters1_1.0.61-5+deb8u1_all.deb", "packageName": "libcupsfilters1", "packageVersion": "1.0.61-5+deb8u1"}, {"OS": "Debian", "OSVersion": "8", "arch": "all", "operator": "lt", "packageFilename": "cups-filters_1.0.61-5+deb8u1_all.deb", "packageName": "cups-filters", "packageVersion": "1.0.61-5+deb8u1"}, {"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "cups-filters_1.0.18-2.1+deb7u2_all.deb", "packageName": "cups-filters", "packageVersion": "1.0.18-2.1+deb7u2"}, {"OS": "Debian", "OSVersion": "8", "arch": "all", "operator": "lt", "packageFilename": "libfontembed1_1.0.61-5+deb8u1_all.deb", "packageName": "libfontembed1", "packageVersion": "1.0.61-5+deb8u1"}, {"OS": "Debian", "OSVersion": "8", "arch": "all", "operator": "lt", "packageFilename": "libcupsfilters-dev_1.0.61-5+deb8u1_all.deb", "packageName": "libcupsfilters-dev", "packageVersion": "1.0.61-5+deb8u1"}, {"OS": "Debian", "OSVersion": "8", "arch": "all", "operator": "lt", "packageFilename": "cups-browsed_1.0.61-5+deb8u1_all.deb", "packageName": "cups-browsed", "packageVersion": "1.0.61-5+deb8u1"}], "scheme": null}

{"cve": [{"lastseen": "2021-02-02T06:21:24", "description": "Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.", "edition": 6, "cvss3": {}, "published": "2015-07-14T16:59:00", "title": "CVE-2015-3279", "type": "cve", "cwe": ["CWE-189"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2015-3279"], "modified": "2016-12-28T02:59:00", "cpe": ["cpe:/a:linuxfoundation:cups-filters:1.0.70", "cpe:/o:canonical:ubuntu_linux:15.04", "cpe:/o:debian:debian_linux:8.0", "cpe:/o:canonical:ubuntu_linux:12.04", "cpe:/o:debian:debian_linux:7.1", "cpe:/o:canonical:ubuntu_linux:14.10", "cpe:/o:canonical:ubuntu_linux:14.04"], "id": "CVE-2015-3279", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3279", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*", "cpe:2.3:a:linuxfoundation:cups-filters:1.0.70:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"]}, {"lastseen": "2021-02-02T06:21:24", "description": "Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.", "edition": 6, "cvss3": {}, "published": "2015-07-14T16:59:00", "title": "CVE-2015-3258", "type": "cve", "cwe": ["CWE-119"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2015-3258"], "modified": "2016-12-28T02:59:00", "cpe": ["cpe:/a:linuxfoundation:cups-filters:1.0.70", "cpe:/o:canonical:ubuntu_linux:15.04", "cpe:/o:debian:debian_linux:8.0", "cpe:/o:canonical:ubuntu_linux:12.04", "cpe:/o:debian:debian_linux:7.1", "cpe:/o:canonical:ubuntu_linux:14.10", "cpe:/o:canonical:ubuntu_linux:14.04"], "id": "CVE-2015-3258", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3258", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*", "cpe:2.3:a:linuxfoundation:cups-filters:1.0.70:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"]}], "fedora": [{"lastseen": "2020-12-21T08:17:53", "bulletinFamily": "unix", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "Contains backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting. ", "modified": "2015-07-18T02:09:37", "published": "2015-07-18T02:09:37", "id": "FEDORA:2B05360E53FF", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 21 Update: cups-filters-1.0.71-1.fc21", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-12-21T08:17:53", "bulletinFamily": "unix", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "Contains backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting. ", "modified": "2015-07-14T15:44:56", "published": "2015-07-14T15:44:56", "id": "FEDORA:407E160BD9AE", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 22 Update: cups-filters-1.0.71-1.fc22", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "nessus": [{"lastseen": "2021-01-12T09:49:09", "description": "It was discovered that the texttopdf utility, part of cups-filters,\nwas susceptible to multiple heap-based buffer overflows due to\nimproper handling of print jobs with a specially crafted line size.\nThis could allow remote attackers to crash texttopdf or possibly\nexecute arbitrary code.", "edition": 22, "published": "2015-07-08T00:00:00", "title": "Debian DSA-3303-1 : cups-filters - security update", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "modified": "2015-07-08T00:00:00", "cpe": ["p-cpe:/a:debian:debian_linux:cups-filters", "cpe:/o:debian:debian_linux:8.0", "cpe:/o:debian:debian_linux:7.0"], "id": "DEBIAN_DSA-3303.NASL", "href": "https://www.tenable.com/plugins/nessus/84598", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Debian Security Advisory DSA-3303. The text \n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(84598);\n script_version(\"2.9\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_bugtraq_id(75436, 75557);\n script_xref(name:\"DSA\", value:\"3303\");\n\n script_name(english:\"Debian DSA-3303-1 : cups-filters - security update\");\n script_summary(english:\"Checks dpkg output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security-related update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"It was discovered that the texttopdf utility, part of cups-filters,\nwas susceptible to multiple heap-based buffer overflows due to\nimproper handling of print jobs with a specially crafted line size.\nThis could allow remote attackers to crash texttopdf or possibly\nexecute arbitrary code.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/wheezy/cups-filters\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/jessie/cups-filters\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.debian.org/security/2015/dsa-3303\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Upgrade the cups-filters packages.\n\nFor the oldstable distribution (wheezy), these problems have been\nfixed in version 1.0.18-2.1+deb7u2.\n\nFor the stable distribution (jessie), these problems have been fixed\nin version 1.0.61-5+deb8u1.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:cups-filters\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:7.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:8.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/07/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/07/08\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"7.0\", prefix:\"cups-filters\", reference:\"1.0.18-2.1+deb7u2\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"libcupsfilters-dev\", reference:\"1.0.18-2.1+deb7u2\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"libcupsfilters1\", reference:\"1.0.18-2.1+deb7u2\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"cups-browsed\", reference:\"1.0.61-5+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"cups-filters\", reference:\"1.0.61-5+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"cups-filters-core-drivers\", reference:\"1.0.61-5+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"libcupsfilters-dev\", reference:\"1.0.61-5+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"libcupsfilters1\", reference:\"1.0.61-5+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"libfontembed-dev\", reference:\"1.0.61-5+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"libfontembed1\", reference:\"1.0.61-5+deb8u1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-12T11:04:46", "description": "The remote host is affected by the vulnerability described in GLSA-201510-08\n(cups-filters: Multiple vulnerabilities)\n\n Multiple vulnerabilities have been discovered in cups-filters. Please\n review the CVE identifiers referenced below for details.\n \nImpact :\n\n A remote attacker could entice a user to open a specially crafted print\n job using cups-filters, possibly resulting in execution of arbitrary code\n with the privileges of the process or a Denial of Service condition.\n \nWorkaround :\n\n There is no known workaround at this time.", "edition": 23, "published": "2015-11-02T00:00:00", "title": "GLSA-201510-08 : cups-filters: Multiple vulnerabilities", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "modified": "2015-11-02T00:00:00", "cpe": ["p-cpe:/a:gentoo:linux:cups-filters", "cpe:/o:gentoo:linux"], "id": "GENTOO_GLSA-201510-08.NASL", "href": "https://www.tenable.com/plugins/nessus/86693", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Gentoo Linux Security Advisory GLSA 201510-08.\n#\n# The advisory text is Copyright (C) 2001-2015 Gentoo Foundation, Inc.\n# and licensed under the Creative Commons - Attribution / Share Alike \n# license. See http://creativecommons.org/licenses/by-sa/3.0/\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(86693);\n script_version(\"2.2\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_xref(name:\"GLSA\", value:\"201510-08\");\n\n script_name(english:\"GLSA-201510-08 : cups-filters: Multiple vulnerabilities\");\n script_summary(english:\"Checks for updated package(s) in /var/db/pkg\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Gentoo host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The remote host is affected by the vulnerability described in GLSA-201510-08\n(cups-filters: Multiple vulnerabilities)\n\n Multiple vulnerabilities have been discovered in cups-filters. Please\n review the CVE identifiers referenced below for details.\n \nImpact :\n\n A remote attacker could entice a user to open a specially crafted print\n job using cups-filters, possibly resulting in execution of arbitrary code\n with the privileges of the process or a Denial of Service condition.\n \nWorkaround :\n\n There is no known workaround at this time.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security.gentoo.org/glsa/201510-08\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"All cups-filters users should upgrade to the latest version:\n # emerge --sync\n # emerge --ask --oneshot --verbose '>=net-print/cups-filters-1.0.71'\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:gentoo:linux:cups-filters\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:gentoo:linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/10/31\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/11/02\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Gentoo Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Gentoo/release\", \"Host/Gentoo/qpkg-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"qpkg.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Gentoo/release\")) audit(AUDIT_OS_NOT, \"Gentoo\");\nif (!get_kb_item(\"Host/Gentoo/qpkg-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\n\nif (qpkg_check(package:\"net-print/cups-filters\", unaffected:make_list(\"ge 1.0.71\"), vulnerable:make_list(\"lt 1.0.71\"))) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:qpkg_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = qpkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"cups-filters\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-07T14:22:56", "description": "cups-filters was updated to fix two security issues.\n\nThese security issues were fixed :\n\n - CVE-2015-3279: Texttopdf integer overflow (incomplete\n fix for CVE-2015-3258) (bsc#937018).\n\n - CVE-2015-3258: Texttopdf heap-based buffer overflow\n (bsc#936281).\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 26, "published": "2015-08-14T00:00:00", "title": "SUSE SLED12 / SLES12 Security Update : cups-filters (SUSE-SU-2015:1377-1)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "modified": "2015-08-14T00:00:00", "cpe": ["p-cpe:/a:novell:suse_linux:cups-filters-foomatic-rip-debuginfo", "p-cpe:/a:novell:suse_linux:cups-filters-foomatic-rip", "cpe:/o:novell:suse_linux:12", "p-cpe:/a:novell:suse_linux:cups-filters-ghostscript", "p-cpe:/a:novell:suse_linux:cups-filters-debuginfo", "p-cpe:/a:novell:suse_linux:cups-filters-cups-browsed", "p-cpe:/a:novell:suse_linux:cups-filters-ghostscript-debuginfo", "p-cpe:/a:novell:suse_linux:cups-filters", "p-cpe:/a:novell:suse_linux:cups-filters-debugsource", "p-cpe:/a:novell:suse_linux:cups-filters-cups-browsed-debuginfo"], "id": "SUSE_SU-2015-1377-1.NASL", "href": "https://www.tenable.com/plugins/nessus/85398", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2015:1377-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(85398);\n script_version(\"2.8\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_bugtraq_id(75436, 75557);\n\n script_name(english:\"SUSE SLED12 / SLES12 Security Update : cups-filters (SUSE-SU-2015:1377-1)\");\n script_summary(english:\"Checks rpm output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"cups-filters was updated to fix two security issues.\n\nThese security issues were fixed :\n\n - CVE-2015-3279: Texttopdf integer overflow (incomplete\n fix for CVE-2015-3258) (bsc#937018).\n\n - CVE-2015-3258: Texttopdf heap-based buffer overflow\n (bsc#936281).\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=936281\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=937018\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-3258/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-3279/\"\n );\n # https://www.suse.com/support/update/announcement/2015/suse-su-20151377-1.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?515f8e4c\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use YaST online_update.\nAlternatively you can run the command listed for your product :\n\nSUSE Linux Enterprise Server 12 :\n\nzypper in -t patch SUSE-SLE-SERVER-12-2015-393=1\n\nSUSE Linux Enterprise Desktop 12 :\n\nzypper in -t patch SUSE-SLE-DESKTOP-12-2015-393=1\n\nTo bring your system up-to-date, use 'zypper patch'.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:cups-filters\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:cups-filters-cups-browsed\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:cups-filters-cups-browsed-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:cups-filters-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:cups-filters-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:cups-filters-foomatic-rip\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:cups-filters-foomatic-rip-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:cups-filters-ghostscript\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:cups-filters-ghostscript-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:12\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/07/06\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/14\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = pregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^(SLED12|SLES12)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLED12 / SLES12\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLES12\" && (! preg(pattern:\"^(0)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLES12 SP0\", os_ver + \" SP\" + sp);\nif (os_ver == \"SLED12\" && (! preg(pattern:\"^(0)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLED12 SP0\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"cups-filters-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"cups-filters-cups-browsed-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"cups-filters-cups-browsed-debuginfo-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"cups-filters-debuginfo-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"cups-filters-debugsource-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"cups-filters-foomatic-rip-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"cups-filters-foomatic-rip-debuginfo-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"cups-filters-ghostscript-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"cups-filters-ghostscript-debuginfo-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"0\", cpu:\"x86_64\", reference:\"cups-filters-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"0\", cpu:\"x86_64\", reference:\"cups-filters-cups-browsed-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"0\", cpu:\"x86_64\", reference:\"cups-filters-cups-browsed-debuginfo-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"0\", cpu:\"x86_64\", reference:\"cups-filters-debuginfo-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"0\", cpu:\"x86_64\", reference:\"cups-filters-debugsource-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"0\", cpu:\"x86_64\", reference:\"cups-filters-foomatic-rip-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"0\", cpu:\"x86_64\", reference:\"cups-filters-foomatic-rip-debuginfo-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"0\", cpu:\"x86_64\", reference:\"cups-filters-ghostscript-1.0.58-8.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"0\", cpu:\"x86_64\", reference:\"cups-filters-ghostscript-debuginfo-1.0.58-8.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"cups-filters\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-17T13:49:01", "description": "A heap-based buffer overflow flaw and an integer overflow flaw leading\nto a heap-based buffer overflow were discovered in the way the\ntexttopdf utility of cups-filter processed print jobs with a specially\ncrafted line size. An attacker able to submit print jobs could use\nthese flaws to crash texttopdf or, possibly, execute arbitrary code\nwith the privileges of the 'lp' user. (CVE-2015-3258, CVE-2015-3279)\n\nNotably, this update also fixes the following bug :\n\n - Previously, when polling CUPS printers from a CUPS\n server, when a printer name contained an underscore (_),\n the client displayed the name containing a hyphen (-)\n instead. This made the print queue unavailable. With\n this update, CUPS allows the underscore character in\n printer names, and printers appear as shown on the CUPS\n server as expected.\n\nIn addition, this update adds the following enhancement :\n\n - Now, the information from local and remote CUPS servers\n is cached during each poll, and the CUPS server load is\n reduced.", "edition": 15, "published": "2015-12-22T00:00:00", "title": "Scientific Linux Security Update : cups-filters on SL7.x x86_64 (20151119)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "modified": "2015-12-22T00:00:00", "cpe": ["p-cpe:/a:fermilab:scientific_linux:cups-filters", "p-cpe:/a:fermilab:scientific_linux:cups-filters-devel", "p-cpe:/a:fermilab:scientific_linux:cups-filters-libs", "x-cpe:/o:fermilab:scientific_linux", "p-cpe:/a:fermilab:scientific_linux:cups-filters-debuginfo"], "id": "SL_20151119_CUPS_FILTERS_ON_SL7_X.NASL", "href": "https://www.tenable.com/plugins/nessus/87553", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text is (C) Scientific Linux.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(87553);\n script_version(\"2.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n\n script_name(english:\"Scientific Linux Security Update : cups-filters on SL7.x x86_64 (20151119)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Scientific Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"A heap-based buffer overflow flaw and an integer overflow flaw leading\nto a heap-based buffer overflow were discovered in the way the\ntexttopdf utility of cups-filter processed print jobs with a specially\ncrafted line size. An attacker able to submit print jobs could use\nthese flaws to crash texttopdf or, possibly, execute arbitrary code\nwith the privileges of the 'lp' user. (CVE-2015-3258, CVE-2015-3279)\n\nNotably, this update also fixes the following bug :\n\n - Previously, when polling CUPS printers from a CUPS\n server, when a printer name contained an underscore (_),\n the client displayed the name containing a hyphen (-)\n instead. This made the print queue unavailable. With\n this update, CUPS allows the underscore character in\n printer names, and printers appear as shown on the CUPS\n server as expected.\n\nIn addition, this update adds the following enhancement :\n\n - Now, the information from local and remote CUPS servers\n is cached during each poll, and the CUPS server load is\n reduced.\"\n );\n # https://listserv.fnal.gov/scripts/wa.exe?A2=ind1512&L=scientific-linux-errata&F=&S=&P=6636\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?dbff5690\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:cups-filters\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:cups-filters-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:cups-filters-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:cups-filters-libs\");\n script_set_attribute(attribute:\"cpe\", value:\"x-cpe:/o:fermilab:scientific_linux\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/11/19\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/12/22\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Scientific Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Scientific Linux \" >!< release) audit(AUDIT_HOST_NOT, \"running Scientific Linux\");\nos_ver = pregmatch(pattern: \"Scientific Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Scientific Linux\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Scientific Linux 7.x\", \"Scientific Linux \" + os_ver);\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Scientific Linux\", cpu);\nif (\"x86_64\" >!< cpu) audit(AUDIT_ARCH_NOT, \"x86_64\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"cups-filters-1.0.35-21.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"cups-filters-debuginfo-1.0.35-21.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"cups-filters-devel-1.0.35-21.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"cups-filters-libs-1.0.35-21.el7\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"cups-filters / cups-filters-debuginfo / cups-filters-devel / etc\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-06T09:30:25", "description": "Updated cups-filters packages that fix two security issues, several\nbugs, and add one enhancement are now available for Red Hat Enterprise\nLinux 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\nThe cups-filters packages contain back ends, filters, and other\nsoftware that was once part of the core Common UNIX Printing System\n(CUPS) distribution but is now maintained independently.\n\nA heap-based buffer overflow flaw and an integer overflow flaw leading\nto a heap-based buffer overflow were discovered in the way the\ntexttopdf utility of cups-filter processed print jobs with a specially\ncrafted line size. An attacker able to submit print jobs could use\nthese flaws to crash texttopdf or, possibly, execute arbitrary code\nwith the privileges of the 'lp' user. (CVE-2015-3258, CVE-2015-3279)\n\nThe CVE-2015-3258 issue was discovered by Petr Sklenar of Red Hat.\n\nNotably, this update also fixes the following bug :\n\n* Previously, when polling CUPS printers from a CUPS server, when a\nprinter name contained an underscore (_), the client displayed the\nname containing a hyphen (-) instead. This made the print queue\nunavailable. With this update, CUPS allows the underscore character in\nprinter names, and printers appear as shown on the CUPS server as\nexpected. (BZ#1167408)\n\nIn addition, this update adds the following enhancement :\n\n* Now, the information from local and remote CUPS servers is cached\nduring each poll, and the CUPS server load is reduced. (BZ#1191691)\n\nAll cups-filters users are advised to upgrade to these updated\npackages, which contain backported patches to correct these issues and\nadd this enhancement.", "edition": 28, "published": "2015-12-02T00:00:00", "title": "CentOS 7 : cups-filters (CESA-2015:2360)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "modified": "2015-12-02T00:00:00", "cpe": ["cpe:/o:centos:centos:7", "p-cpe:/a:centos:centos:cups-filters-libs", "p-cpe:/a:centos:centos:cups-filters", "p-cpe:/a:centos:centos:cups-filters-devel"], "id": "CENTOS_RHSA-2015-2360.NASL", "href": "https://www.tenable.com/plugins/nessus/87152", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2015:2360 and \n# CentOS Errata and Security Advisory 2015:2360 respectively.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(87152);\n script_version(\"2.7\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/04\");\n\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_xref(name:\"RHSA\", value:\"2015:2360\");\n\n script_name(english:\"CentOS 7 : cups-filters (CESA-2015:2360)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated cups-filters packages that fix two security issues, several\nbugs, and add one enhancement are now available for Red Hat Enterprise\nLinux 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\nThe cups-filters packages contain back ends, filters, and other\nsoftware that was once part of the core Common UNIX Printing System\n(CUPS) distribution but is now maintained independently.\n\nA heap-based buffer overflow flaw and an integer overflow flaw leading\nto a heap-based buffer overflow were discovered in the way the\ntexttopdf utility of cups-filter processed print jobs with a specially\ncrafted line size. An attacker able to submit print jobs could use\nthese flaws to crash texttopdf or, possibly, execute arbitrary code\nwith the privileges of the 'lp' user. (CVE-2015-3258, CVE-2015-3279)\n\nThe CVE-2015-3258 issue was discovered by Petr Sklenar of Red Hat.\n\nNotably, this update also fixes the following bug :\n\n* Previously, when polling CUPS printers from a CUPS server, when a\nprinter name contained an underscore (_), the client displayed the\nname containing a hyphen (-) instead. This made the print queue\nunavailable. With this update, CUPS allows the underscore character in\nprinter names, and printers appear as shown on the CUPS server as\nexpected. (BZ#1167408)\n\nIn addition, this update adds the following enhancement :\n\n* Now, the information from local and remote CUPS servers is cached\nduring each poll, and the CUPS server load is reduced. (BZ#1191691)\n\nAll cups-filters users are advised to upgrade to these updated\npackages, which contain backported patches to correct these issues and\nadd this enhancement.\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2015-November/002181.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?7e73baac\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected cups-filters packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2015-3258\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:cups-filters\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:cups-filters-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:cups-filters-libs\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/11/30\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/12/02\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/CentOS/release\");\nif (isnull(release) || \"CentOS\" >!< release) audit(AUDIT_OS_NOT, \"CentOS\");\nos_ver = pregmatch(pattern: \"CentOS(?: Linux)? release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"CentOS\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"CentOS 7.x\", \"CentOS \" + os_ver);\n\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"cups-filters-1.0.35-21.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"cups-filters-devel-1.0.35-21.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"cups-filters-libs-1.0.35-21.el7\")) flag++;\n\n\nif (flag)\n{\n cr_plugin_caveat = '\\n' +\n 'NOTE: The security advisory associated with this vulnerability has a\\n' +\n 'fixed package version that may only be available in the continuous\\n' +\n 'release (CR) repository for CentOS, until it is present in the next\\n' +\n 'point release of CentOS.\\n\\n' +\n\n 'If an equal or higher package level does not exist in the baseline\\n' +\n 'repository for your major version of CentOS, then updates from the CR\\n' +\n 'repository will need to be applied in order to address the\\n' +\n 'vulnerability.\\n';\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + cr_plugin_caveat\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"cups-filters / cups-filters-devel / cups-filters-libs\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-17T12:50:16", "description": "From Red Hat Security Advisory 2015:2360 :\n\nUpdated cups-filters packages that fix two security issues, several\nbugs, and add one enhancement are now available for Red Hat Enterprise\nLinux 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\nThe cups-filters packages contain back ends, filters, and other\nsoftware that was once part of the core Common UNIX Printing System\n(CUPS) distribution but is now maintained independently.\n\nA heap-based buffer overflow flaw and an integer overflow flaw leading\nto a heap-based buffer overflow were discovered in the way the\ntexttopdf utility of cups-filter processed print jobs with a specially\ncrafted line size. An attacker able to submit print jobs could use\nthese flaws to crash texttopdf or, possibly, execute arbitrary code\nwith the privileges of the 'lp' user. (CVE-2015-3258, CVE-2015-3279)\n\nThe CVE-2015-3258 issue was discovered by Petr Sklenar of Red Hat.\n\nNotably, this update also fixes the following bug :\n\n* Previously, when polling CUPS printers from a CUPS server, when a\nprinter name contained an underscore (_), the client displayed the\nname containing a hyphen (-) instead. This made the print queue\nunavailable. With this update, CUPS allows the underscore character in\nprinter names, and printers appear as shown on the CUPS server as\nexpected. (BZ#1167408)\n\nIn addition, this update adds the following enhancement :\n\n* Now, the information from local and remote CUPS servers is cached\nduring each poll, and the CUPS server load is reduced. (BZ#1191691)\n\nAll cups-filters users are advised to upgrade to these updated\npackages, which contain backported patches to correct these issues and\nadd this enhancement.", "edition": 25, "published": "2015-11-24T00:00:00", "title": "Oracle Linux 7 : cups-filters (ELSA-2015-2360)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "modified": "2015-11-24T00:00:00", "cpe": ["p-cpe:/a:oracle:linux:cups-filters-devel", "p-cpe:/a:oracle:linux:cups-filters-libs", "cpe:/o:oracle:linux:7", "p-cpe:/a:oracle:linux:cups-filters"], "id": "ORACLELINUX_ELSA-2015-2360.NASL", "href": "https://www.tenable.com/plugins/nessus/87035", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Red Hat Security Advisory RHSA-2015:2360 and \n# Oracle Linux Security Advisory ELSA-2015-2360 respectively.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(87035);\n script_version(\"1.7\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_xref(name:\"RHSA\", value:\"2015:2360\");\n\n script_name(english:\"Oracle Linux 7 : cups-filters (ELSA-2015-2360)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Oracle Linux host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"From Red Hat Security Advisory 2015:2360 :\n\nUpdated cups-filters packages that fix two security issues, several\nbugs, and add one enhancement are now available for Red Hat Enterprise\nLinux 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\nThe cups-filters packages contain back ends, filters, and other\nsoftware that was once part of the core Common UNIX Printing System\n(CUPS) distribution but is now maintained independently.\n\nA heap-based buffer overflow flaw and an integer overflow flaw leading\nto a heap-based buffer overflow were discovered in the way the\ntexttopdf utility of cups-filter processed print jobs with a specially\ncrafted line size. An attacker able to submit print jobs could use\nthese flaws to crash texttopdf or, possibly, execute arbitrary code\nwith the privileges of the 'lp' user. (CVE-2015-3258, CVE-2015-3279)\n\nThe CVE-2015-3258 issue was discovered by Petr Sklenar of Red Hat.\n\nNotably, this update also fixes the following bug :\n\n* Previously, when polling CUPS printers from a CUPS server, when a\nprinter name contained an underscore (_), the client displayed the\nname containing a hyphen (-) instead. This made the print queue\nunavailable. With this update, CUPS allows the underscore character in\nprinter names, and printers appear as shown on the CUPS server as\nexpected. (BZ#1167408)\n\nIn addition, this update adds the following enhancement :\n\n* Now, the information from local and remote CUPS servers is cached\nduring each poll, and the CUPS server load is reduced. (BZ#1191691)\n\nAll cups-filters users are advised to upgrade to these updated\npackages, which contain backported patches to correct these issues and\nadd this enhancement.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2015-November/005570.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected cups-filters packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:cups-filters\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:cups-filters-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:cups-filters-libs\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/11/23\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/11/24\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Oracle Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/OracleLinux\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/OracleLinux\")) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || !pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux)\", string:release)) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nos_ver = pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Oracle Linux\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Oracle Linux 7\", \"Oracle Linux \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Oracle Linux\", cpu);\nif (\"x86_64\" >!< cpu) audit(AUDIT_ARCH_NOT, \"x86_64\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"cups-filters-1.0.35-21.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"cups-filters-devel-1.0.35-21.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"cups-filters-libs-1.0.35-21.el7\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"cups-filters / cups-filters-devel / cups-filters-libs\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-20T15:28:56", "description": "Petr Sklenar discovered that the cups-filters texttopdf filter\nincorrectly handled line sizes. A remote attacker could use this issue\nto cause a denial of service, or possibly execute arbitrary code as\nthe lp user. (CVE-2015-3258, CVE-2015-3279).\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 22, "published": "2015-07-07T00:00:00", "title": "Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : cups-filters vulnerabilities (USN-2659-1)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "modified": "2015-07-07T00:00:00", "cpe": ["cpe:/o:canonical:ubuntu_linux:15.04", "cpe:/o:canonical:ubuntu_linux:14.10", "p-cpe:/a:canonical:ubuntu_linux:cups-filters", "cpe:/o:canonical:ubuntu_linux:12.04:-:lts", "cpe:/o:canonical:ubuntu_linux:14.04"], "id": "UBUNTU_USN-2659-1.NASL", "href": "https://www.tenable.com/plugins/nessus/84564", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-2659-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(84564);\n script_version(\"2.10\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/19\");\n\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_bugtraq_id(75436);\n script_xref(name:\"USN\", value:\"2659-1\");\n\n script_name(english:\"Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : cups-filters vulnerabilities (USN-2659-1)\");\n script_summary(english:\"Checks dpkg output for updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Ubuntu host is missing a security-related patch.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Petr Sklenar discovered that the cups-filters texttopdf filter\nincorrectly handled line sizes. A remote attacker could use this issue\nto cause a denial of service, or possibly execute arbitrary code as\nthe lp user. (CVE-2015-3258, CVE-2015-3279).\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://usn.ubuntu.com/2659-1/\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected cups-filters package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:cups-filters\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:12.04:-:lts\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.04\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.10\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:15.04\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/07/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/07/06\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/07/07\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2015-2020 Canonical, Inc. / NASL script (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! preg(pattern:\"^(12\\.04|14\\.04|14\\.10|15\\.04)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 12.04 / 14.04 / 14.10 / 15.04\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"12.04\", pkgname:\"cups-filters\", pkgver:\"1.0.18-0ubuntu0.4\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"cups-filters\", pkgver:\"1.0.52-0ubuntu1.5\")) flag++;\nif (ubuntu_check(osver:\"14.10\", pkgname:\"cups-filters\", pkgver:\"1.0.61-0ubuntu2.3\")) flag++;\nif (ubuntu_check(osver:\"15.04\", pkgname:\"cups-filters\", pkgver:\"1.0.67-0ubuntu2.2\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"cups-filters\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-12T10:13:14", "description": "Fixes CVE-2015-3258 & CVE-2015-3279\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 15, "published": "2015-07-20T00:00:00", "title": "Fedora 21 : cups-filters-1.0.71-1.fc21 (2015-11192)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "modified": "2015-07-20T00:00:00", "cpe": ["cpe:/o:fedoraproject:fedora:21", "p-cpe:/a:fedoraproject:fedora:cups-filters"], "id": "FEDORA_2015-11192.NASL", "href": "https://www.tenable.com/plugins/nessus/84844", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory 2015-11192.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(84844);\n script_version(\"2.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_xref(name:\"FEDORA\", value:\"2015-11192\");\n\n script_name(english:\"Fedora 21 : cups-filters-1.0.71-1.fc21 (2015-11192)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Fixes CVE-2015-3258 & CVE-2015-3279\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2015-July/162145.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?02f1dfab\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected cups-filters package.\"\n );\n script_set_attribute(attribute:\"risk_factor\", value:\"High\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:cups-filters\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:21\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/07/04\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/07/20\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = eregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^21([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 21.x\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"FC21\", reference:\"cups-filters-1.0.71-1.fc21\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"cups-filters\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-12T10:13:14", "description": "Fixes CVE-2015-3258 & CVE-2015-3279\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 15, "published": "2015-07-15T00:00:00", "title": "Fedora 22 : cups-filters-1.0.71-1.fc22 (2015-11163)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "modified": "2015-07-15T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:cups-filters", "cpe:/o:fedoraproject:fedora:22"], "id": "FEDORA_2015-11163.NASL", "href": "https://www.tenable.com/plugins/nessus/84753", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory 2015-11163.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(84753);\n script_version(\"2.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_xref(name:\"FEDORA\", value:\"2015-11163\");\n\n script_name(english:\"Fedora 22 : cups-filters-1.0.71-1.fc22 (2015-11163)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Fixes CVE-2015-3258 & CVE-2015-3279\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2015-July/161930.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?bac0da65\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected cups-filters package.\"\n );\n script_set_attribute(attribute:\"risk_factor\", value:\"High\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:cups-filters\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:22\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/07/04\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/07/15\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = eregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^22([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 22.x\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"FC22\", reference:\"cups-filters-1.0.71-1.fc22\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"cups-filters\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-12T09:43:38", "description": "Petr Sklenar of Red Hat discovered that the texttopdf tool, part of\ncups filters, was susceptible to multiple heap-based buffer and\ninteger overflows due to improper handling of print jobs. This could\nallow remote attackers to crash texttopdf or possibly execute\narbitrary code.\n\nFor Debian 6 'Squeeze', this issue has been fixed in cups version\n1.4.4-7+squeeze10. For Wheezy and Jessie, this has been fixed in the\ncups-filter package. We recommend you to upgrade your cups packages.\n\nLearn more about the Debian Long Term Support (LTS) Project and how to\napply these updates at: https://wiki.debian.org/LTS/\n\nNOTE: Tenable Network Security has extracted the preceding description\nblock directly from the DLA security advisory. Tenable has attempted\nto automatically clean and format it as much as possible without\nintroducing additional issues.", "edition": 15, "published": "2015-09-25T00:00:00", "title": "Debian DLA-314-1 : cups security update", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "modified": "2015-09-25T00:00:00", "cpe": ["cpe:/o:debian:debian_linux:6.0", "p-cpe:/a:debian:debian_linux:libcupsdriver1", "p-cpe:/a:debian:debian_linux:cups-client", "p-cpe:/a:debian:debian_linux:cups", "p-cpe:/a:debian:debian_linux:libcupsimage2", "p-cpe:/a:debian:debian_linux:libcupsmime1", "p-cpe:/a:debian:debian_linux:libcupscgi1-dev", "p-cpe:/a:debian:debian_linux:libcups2", "p-cpe:/a:debian:debian_linux:libcupsppdc1", "p-cpe:/a:debian:debian_linux:cups-common", "p-cpe:/a:debian:debian_linux:libcups2-dev", "p-cpe:/a:debian:debian_linux:cups-ppdc", "p-cpe:/a:debian:debian_linux:cups-dbg", "p-cpe:/a:debian:debian_linux:libcupscgi1", "p-cpe:/a:debian:debian_linux:cupsddk", "p-cpe:/a:debian:debian_linux:libcupsdriver1-dev", "p-cpe:/a:debian:debian_linux:libcupsimage2-dev", "p-cpe:/a:debian:debian_linux:libcupsppdc1-dev", "p-cpe:/a:debian:debian_linux:cups-bsd", "p-cpe:/a:debian:debian_linux:libcupsmime1-dev"], "id": "DEBIAN_DLA-314.NASL", "href": "https://www.tenable.com/plugins/nessus/86127", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Debian Security Advisory DLA-314-1. The text\n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(86127);\n script_version(\"2.5\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_bugtraq_id(75436, 75557);\n\n script_name(english:\"Debian DLA-314-1 : cups security update\");\n script_summary(english:\"Checks dpkg output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Petr Sklenar of Red Hat discovered that the texttopdf tool, part of\ncups filters, was susceptible to multiple heap-based buffer and\ninteger overflows due to improper handling of print jobs. This could\nallow remote attackers to crash texttopdf or possibly execute\narbitrary code.\n\nFor Debian 6 'Squeeze', this issue has been fixed in cups version\n1.4.4-7+squeeze10. For Wheezy and Jessie, this has been fixed in the\ncups-filter package. We recommend you to upgrade your cups packages.\n\nLearn more about the Debian Long Term Support (LTS) Project and how to\napply these updates at: https://wiki.debian.org/LTS/\n\nNOTE: Tenable Network Security has extracted the preceding description\nblock directly from the DLA security advisory. Tenable has attempted\nto automatically clean and format it as much as possible without\nintroducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://lists.debian.org/debian-lts-announce/2015/09/msg00009.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/squeeze-lts/cups\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://wiki.debian.org/LTS/\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Upgrade the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:cups\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:cups-bsd\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:cups-client\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:cups-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:cups-dbg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:cups-ppdc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:cupsddk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libcups2\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libcups2-dev\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libcupscgi1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libcupscgi1-dev\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libcupsdriver1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libcupsdriver1-dev\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libcupsimage2\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libcupsimage2-dev\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libcupsmime1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libcupsmime1-dev\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libcupsppdc1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libcupsppdc1-dev\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:6.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/09/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/09/25\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"6.0\", prefix:\"cups\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"cups-bsd\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"cups-client\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"cups-common\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"cups-dbg\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"cups-ppdc\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"cupsddk\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"libcups2\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"libcups2-dev\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"libcupscgi1\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"libcupscgi1-dev\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"libcupsdriver1\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"libcupsdriver1-dev\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"libcupsimage2\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"libcupsimage2-dev\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"libcupsmime1\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"libcupsmime1-dev\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"libcupsppdc1\", reference:\"1.4.4-7+squeeze10\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"libcupsppdc1-dev\", reference:\"1.4.4-7+squeeze10\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "openvas": [{"lastseen": "2019-05-29T18:36:49", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "Oracle Linux Local Security Checks ELSA-2015-2360", "modified": "2018-09-28T00:00:00", "published": "2015-11-24T00:00:00", "id": "OPENVAS:1361412562310122745", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310122745", "type": "openvas", "title": "Oracle Linux Local Check: ELSA-2015-2360", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: ELSA-2015-2360.nasl 11688 2018-09-28 13:36:28Z cfischer $\n#\n# Oracle Linux Local Check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.122745\");\n script_version(\"$Revision: 11688 $\");\n script_tag(name:\"creation_date\", value:\"2015-11-24 10:17:21 +0200 (Tue, 24 Nov 2015)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-28 15:36:28 +0200 (Fri, 28 Sep 2018) $\");\n script_name(\"Oracle Linux Local Check: ELSA-2015-2360\");\n script_tag(name:\"insight\", value:\"ELSA-2015-2360 - cups-filters security, bug fix, and enhancement update. Please see the references for more insight.\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"summary\", value:\"Oracle Linux Local Security Checks ELSA-2015-2360\");\n script_xref(name:\"URL\", value:\"http://linux.oracle.com/errata/ELSA-2015-2360.html\");\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/oracle_linux\", \"ssh/login/release\", re:\"ssh/login/release=OracleLinux7\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Eero Volotinen\");\n script_family(\"Oracle Linux Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"OracleLinux7\")\n{\n if ((res = isrpmvuln(pkg:\"cups-filters\", rpm:\"cups-filters~1.0.35~21.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"cups-filters-devel\", rpm:\"cups-filters-devel~1.0.35~21.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"cups-filters-libs\", rpm:\"cups-filters-libs~1.0.35~21.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n\n}\nif (__pkg_match) exit(99);\n exit(0);\n\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:37:00", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "The remote host is missing an update for the ", "modified": "2018-11-23T00:00:00", "published": "2015-11-20T00:00:00", "id": "OPENVAS:1361412562310871485", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310871485", "type": "openvas", "title": "RedHat Update for cups-filters RHSA-2015:2360-01", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# RedHat Update for cups-filters RHSA-2015:2360-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.871485\");\n script_version(\"$Revision: 12497 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-11-23 09:28:21 +0100 (Fri, 23 Nov 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-11-20 06:20:12 +0100 (Fri, 20 Nov 2015)\");\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"RedHat Update for cups-filters RHSA-2015:2360-01\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'cups-filters'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"The cups-filters packages contain back ends,\nfilters, and other software that was once part of the core Common UNIX Printing\nSystem (CUPS) distribution but is now maintained independently.\n\nA heap-based buffer overflow flaw and an integer overflow flaw leading to a\nheap-based buffer overflow were discovered in the way the texttopdf utility\nof cups-filter processed print jobs with a specially crafted line size.\nAn attacker able to submit print jobs could use these flaws to crash\ntexttopdf or, possibly, execute arbitrary code with the privileges of the\n'lp' user. (CVE-2015-3258, CVE-2015-3279)\n\nThe CVE-2015-3258 issue was discovered by Petr Sklenar of Red Hat.\n\nNotably, this update also fixes the following bug:\n\n * Previously, when polling CUPS printers from a CUPS server, when a printer\nname contained an underscore (_), the client displayed the name containing\na hyphen (-) instead. This made the print queue unavailable. With this\nupdate, CUPS allows the underscore character in printer names, and printers\nappear as shown on the CUPS server as expected. (BZ#1167408)\n\nIn addition, this update adds the following enhancement:\n\n * Now, the information from local and remote CUPS servers is cached during\neach poll, and the CUPS server load is reduced. (BZ#1191691)\n\nAll cups-filters users are advised to upgrade to these updated packages,\nwhich contain backported patches to correct these issues and add this\nenhancement.\");\n script_tag(name:\"affected\", value:\"cups-filters on Red Hat Enterprise Linux Server (v. 7)\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n script_xref(name:\"RHSA\", value:\"2015:2360-01\");\n script_xref(name:\"URL\", value:\"https://www.redhat.com/archives/rhsa-announce/2015-November/msg00041.html\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\", re:\"ssh/login/release=RHENT_7\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"RHENT_7\")\n{\n\n if ((res = isrpmvuln(pkg:\"cups-filters\", rpm:\"cups-filters~1.0.35~21.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"cups-filters-debuginfo\", rpm:\"cups-filters-debuginfo~1.0.35~21.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"cups-filters-libs\", rpm:\"cups-filters-libs~1.0.35~21.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:36:18", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2015-07-18T00:00:00", "id": "OPENVAS:1361412562310869772", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310869772", "type": "openvas", "title": "Fedora Update for cups-filters FEDORA-2015-11192", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Fedora Update for cups-filters FEDORA-2015-11192\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.869772\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2015-07-18 06:25:51 +0200 (Sat, 18 Jul 2015)\");\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for cups-filters FEDORA-2015-11192\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'cups-filters'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"cups-filters on Fedora 21\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n script_xref(name:\"FEDORA\", value:\"2015-11192\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/pipermail/package-announce/2015-July/162145.html\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC21\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC21\")\n{\n\n if ((res = isrpmvuln(pkg:\"cups-filters\", rpm:\"cups-filters~1.0.71~1.fc21\", rls:\"FC21\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:36:37", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "Mageia Linux Local Security Checks mgasa-2015-0270", "modified": "2018-09-28T00:00:00", "published": "2015-10-15T00:00:00", "id": "OPENVAS:1361412562310130108", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310130108", "type": "openvas", "title": "Mageia Linux Local Check: mgasa-2015-0270", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: mgasa-2015-0270.nasl 11692 2018-09-28 16:55:19Z cfischer $\n#\n# Mageia Linux security check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://www.solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.130108\");\n script_version(\"$Revision: 11692 $\");\n script_tag(name:\"creation_date\", value:\"2015-10-15 10:42:48 +0300 (Thu, 15 Oct 2015)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-28 18:55:19 +0200 (Fri, 28 Sep 2018) $\");\n script_name(\"Mageia Linux Local Check: mgasa-2015-0270\");\n script_tag(name:\"insight\", value:\"A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filters processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to crash texttopdf or, possibly, execute arbitrary code with the privileges of the 'lp' user (CVE-2015-3258, CVE-2015-3279).\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"URL\", value:\"https://advisories.mageia.org/MGASA-2015-0270.html\");\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/mageia_linux\", \"ssh/login/release\", re:\"ssh/login/release=MAGEIA5\");\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"summary\", value:\"Mageia Linux Local Security Checks mgasa-2015-0270\");\n script_copyright(\"Eero Volotinen\");\n script_family(\"Mageia Linux Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"MAGEIA5\")\n{\nif ((res = isrpmvuln(pkg:\"cups-filters\", rpm:\"cups-filters~1.0.71~1.mga5\", rls:\"MAGEIA5\")) != NULL) {\n security_message(data:res);\n exit(0);\n}\nif (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2017-07-24T12:53:45", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "It was discovered that the texttopdf\nutility, part of cups-filters, was susceptible to multiple heap-based buffer\noverflows due to improper handling of print jobs with a specially crafted line size.\nThis could allow remote attackers to crash texttopdf or possibly execute arbitrary\ncode.", "modified": "2017-07-07T00:00:00", "published": "2015-07-07T00:00:00", "id": "OPENVAS:703303", "href": "http://plugins.openvas.org/nasl.php?oid=703303", "type": "openvas", "title": "Debian Security Advisory DSA 3303-1 (cups-filters - security update)", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_3303.nasl 6609 2017-07-07 12:05:59Z cfischer $\n# Auto-generated from advisory DSA 3303-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\n\nif(description)\n{\n script_id(703303);\n script_version(\"$Revision: 6609 $\");\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_name(\"Debian Security Advisory DSA 3303-1 (cups-filters - security update)\");\n script_tag(name: \"last_modification\", value: \"$Date: 2017-07-07 14:05:59 +0200 (Fri, 07 Jul 2017) $\");\n script_tag(name: \"creation_date\", value: \"2015-07-07 00:00:00 +0200 (Tue, 07 Jul 2015)\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name: \"solution_type\", value: \"VendorFix\");\n script_tag(name: \"qod_type\", value: \"package\");\n\n script_xref(name: \"URL\", value: \"http://www.debian.org/security/2015/dsa-3303.html\");\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\");\n script_tag(name: \"affected\", value: \"cups-filters on Debian Linux\");\n script_tag(name: \"insight\", value: \"This package provides additional CUPS\nfilters which are not provided by the CUPS project itself. This includes filters\nfor a PDF based printing workflow.\");\n script_tag(name: \"solution\", value: \"For the oldstable distribution (wheezy),\nthese problems have been fixed in version 1.0.18-2.1+deb7u2.\n\nFor the stable distribution (jessie), these problems have been fixed in\nversion 1.0.61-5+deb8u1.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 1.0.71-1.\n\nWe recommend that you upgrade your cups-filters packages.\");\n script_tag(name: \"summary\", value: \"It was discovered that the texttopdf\nutility, part of cups-filters, was susceptible to multiple heap-based buffer\noverflows due to improper handling of print jobs with a specially crafted line size.\nThis could allow remote attackers to crash texttopdf or possibly execute arbitrary\ncode.\");\n script_tag(name: \"vuldetect\", value: \"This check tests the installed software\nversion using the apt package manager.\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isdpkgvuln(pkg:\"cups-filters\", ver:\"1.0.18-2.1+deb7u2\", rls_regex:\"DEB7.[0-9]\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"libcupsfilters-dev\", ver:\"1.0.18-2.1+deb7u2\", rls_regex:\"DEB7.[0-9]\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"libcupsfilters1:amd64\", ver:\"1.0.18-2.1+deb7u2\", rls_regex:\"DEB7.[0-9]\")) != NULL) {\n report += res;\n}\n\nif ((res = isdpkgvuln(pkg:\"libcupsfilters1:i386\", ver:\"1.0.18-2.1+deb7u2\", rls_regex:\"DEB7.[0-9]\")) != NULL) {\n report += res;\n}\n\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2019-05-29T18:36:35", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "Gentoo Linux Local Security Checks GLSA 201510-08", "modified": "2018-10-26T00:00:00", "published": "2015-11-08T00:00:00", "id": "OPENVAS:1361412562310121421", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310121421", "type": "openvas", "title": "Gentoo Security Advisory GLSA 201510-08", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: glsa-201510-08.nasl 12128 2018-10-26 13:35:25Z cfischer $\n#\n# Gentoo Linux security check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.121421\");\n script_version(\"$Revision: 12128 $\");\n script_tag(name:\"creation_date\", value:\"2015-11-08 13:04:39 +0200 (Sun, 08 Nov 2015)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-10-26 15:35:25 +0200 (Fri, 26 Oct 2018) $\");\n script_name(\"Gentoo Security Advisory GLSA 201510-08\");\n script_tag(name:\"insight\", value:\"Multiple vulnerabilities have been discovered in cups-filters. Please review the CVE identifiers referenced below for details.\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"URL\", value:\"https://security.gentoo.org/glsa/201510-08\");\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/gentoo\", \"ssh/login/pkg\");\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"summary\", value:\"Gentoo Linux Local Security Checks GLSA 201510-08\");\n script_copyright(\"Eero Volotinen\");\n script_family(\"Gentoo Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-gentoo.inc\");\n\nres = \"\";\nreport = \"\";\n\nif((res=ispkgvuln(pkg:\"net-print/cups-filters\", unaffected: make_list(\"ge 1.0.71\"), vulnerable: make_list(\"lt 1.0.71\"))) != NULL) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:36:47", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "The remote host is missing an update for the ", "modified": "2019-03-13T00:00:00", "published": "2015-07-07T00:00:00", "id": "OPENVAS:1361412562310842266", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310842266", "type": "openvas", "title": "Ubuntu Update for cups-filters USN-2659-1", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Ubuntu Update for cups-filters USN-2659-1\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.842266\");\n script_version(\"$Revision: 14140 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-13 13:26:09 +0100 (Wed, 13 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2015-07-07 06:44:57 +0200 (Tue, 07 Jul 2015)\");\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Ubuntu Update for cups-filters USN-2659-1\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'cups-filters'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"Petr Sklenar discovered that the cups-filters\ntexttopdf filter incorrectly handled line sizes. A remote attacker could use this\nissue to cause a denial of service, or possibly execute arbitrary code as the lp\nuser. (CVE-2015-3258, CVE-2015-3279)\");\n script_tag(name:\"affected\", value:\"cups-filters on Ubuntu 14.10,\n Ubuntu 14.04 LTS,\n Ubuntu 12.04 LTS\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n script_xref(name:\"USN\", value:\"2659-1\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-2659-1/\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU(14\\.10|14\\.04 LTS|12\\.04 LTS)\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"UBUNTU14.10\")\n{\n\n if ((res = isdpkgvuln(pkg:\"cups-filters\", ver:\"1.0.61-0ubuntu2.3\", rls:\"UBUNTU14.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU14.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"cups-filters\", ver:\"1.0.52-0ubuntu1.5\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU12.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"cups-filters\", ver:\"1.0.18-0ubuntu0.4\", rls:\"UBUNTU12.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:36:23", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "It was discovered that the texttopdf\nutility, part of cups-filters, was susceptible to multiple heap-based buffer\noverflows due to improper handling of print jobs with a specially crafted line size.\nThis could allow remote attackers to crash texttopdf or possibly execute arbitrary\ncode.", "modified": "2019-03-18T00:00:00", "published": "2015-07-07T00:00:00", "id": "OPENVAS:1361412562310703303", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310703303", "type": "openvas", "title": "Debian Security Advisory DSA 3303-1 (cups-filters - security update)", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_3303.nasl 14278 2019-03-18 14:47:26Z cfischer $\n# Auto-generated from advisory DSA 3303-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.703303\");\n script_version(\"$Revision: 14278 $\");\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_name(\"Debian Security Advisory DSA 3303-1 (cups-filters - security update)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-18 15:47:26 +0100 (Mon, 18 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2015-07-07 00:00:00 +0200 (Tue, 07 Jul 2015)\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n script_xref(name:\"URL\", value:\"http://www.debian.org/security/2015/dsa-3303.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\", re:\"ssh/login/release=DEB7\");\n script_tag(name:\"affected\", value:\"cups-filters on Debian Linux\");\n script_tag(name:\"solution\", value:\"For the oldstable distribution (wheezy),\nthese problems have been fixed in version 1.0.18-2.1+deb7u2.\n\nFor the stable distribution (jessie), these problems have been fixed in\nversion 1.0.61-5+deb8u1.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 1.0.71-1.\n\nWe recommend that you upgrade your cups-filters packages.\");\n script_tag(name:\"summary\", value:\"It was discovered that the texttopdf\nutility, part of cups-filters, was susceptible to multiple heap-based buffer\noverflows due to improper handling of print jobs with a specially crafted line size.\nThis could allow remote attackers to crash texttopdf or possibly execute arbitrary\ncode.\");\n script_tag(name:\"vuldetect\", value:\"This check tests the installed software\nversion using the apt package manager.\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif((res = isdpkgvuln(pkg:\"cups-filters\", ver:\"1.0.18-2.1+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libcupsfilters-dev\", ver:\"1.0.18-2.1+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libcupsfilters1:amd64\", ver:\"1.0.18-2.1+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\n\nif((res = isdpkgvuln(pkg:\"libcupsfilters1:i386\", ver:\"1.0.18-2.1+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\n\n\nif(report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99);\n}", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:36:42", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2015-07-15T00:00:00", "id": "OPENVAS:1361412562310869751", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310869751", "type": "openvas", "title": "Fedora Update for cups-filters FEDORA-2015-11163", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Fedora Update for cups-filters FEDORA-2015-11163\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.869751\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2015-07-15 06:19:37 +0200 (Wed, 15 Jul 2015)\");\n script_cve_id(\"CVE-2015-3258\", \"CVE-2015-3279\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for cups-filters FEDORA-2015-11163\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'cups-filters'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"cups-filters on Fedora 22\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n script_xref(name:\"FEDORA\", value:\"2015-11163\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/pipermail/package-announce/2015-July/161930.html\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC22\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC22\")\n{\n\n if ((res = isrpmvuln(pkg:\"cups-filters\", rpm:\"cups-filters~1.0.71~1.fc22\", rls:\"FC22\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "securityvulns": [{"lastseen": "2018-08-31T11:11:00", "bulletinFamily": "software", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA512\r\n\r\n- -------------------------------------------------------------------------\r\nDebian Security Advisory DSA-3303-1 security@debian.org\r\nhttps://www.debian.org/security/ Alessandro Ghedini\r\nJuly 07, 2015 https://www.debian.org/security/faq\r\n- -------------------------------------------------------------------------\r\n\r\nPackage : cups-filters\r\nCVE ID : CVE-2015-3258 CVE-2015-3279\r\n\r\nIt was discovered that the texttopdf utility, part of cups-filters, was\r\nsusceptible to multiple heap-based buffer overflows due to improper\r\nhandling of print jobs with a specially crafted line size. This could\r\nallow remote attackers to crash texttopdf or possibly execute arbitrary\r\ncode.\r\n\r\nFor the oldstable distribution &#40;wheezy&#41;, these problems have been fixed\r\nin version 1.0.18-2.1+deb7u2.\r\n\r\nFor the stable distribution &#40;jessie&#41;, these problems have been fixed in\r\nversion 1.0.61-5+deb8u1.\r\n\r\nFor the unstable distribution &#40;sid&#41;, these problems have been fixed in\r\nversion 1.0.71-1.\r\n\r\nWe recommend that you upgrade your cups-filters packages.\r\n\r\nFurther information about Debian Security Advisories, how to apply\r\nthese updates to your system and frequently asked questions can be\r\nfound at: https://www.debian.org/security/\r\n\r\nMailing list: debian-security-announce@lists.debian.org\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1\r\n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\r\n1cf0zofYYwbqOgzrX8w5\r\n=iIn9\r\n-----END PGP SIGNATURE-----\r\n\r\n", "edition": 1, "modified": "2015-07-13T00:00:00", "published": "2015-07-13T00:00:00", "id": "SECURITYVULNS:DOC:32311", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32311", "title": "[SECURITY] [DSA 3303-1] cups-filters security update", "type": "securityvulns", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-08-31T11:10:01", "bulletinFamily": "software", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "texttopdf buffer overflows.", "edition": 1, "modified": "2015-07-13T00:00:00", "published": "2015-07-13T00:00:00", "id": "SECURITYVULNS:VULN:14577", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:14577", "title": "cups-filters buffer overflow", "type": "securityvulns", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "centos": [{"lastseen": "2019-12-20T18:26:00", "bulletinFamily": "unix", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "**CentOS Errata and Security Advisory** CESA-2015:2360\n\n\nThe cups-filters packages contain back ends, filters, and other software\nthat was once part of the core Common UNIX Printing System (CUPS)\ndistribution but is now maintained independently.\n\nA heap-based buffer overflow flaw and an integer overflow flaw leading to a\nheap-based buffer overflow were discovered in the way the texttopdf utility\nof cups-filter processed print jobs with a specially crafted line size.\nAn attacker able to submit print jobs could use these flaws to crash\ntexttopdf or, possibly, execute arbitrary code with the privileges of the\n\"lp\" user. (CVE-2015-3258, CVE-2015-3279)\n\nThe CVE-2015-3258 issue was discovered by Petr Sklenar of Red Hat.\n\nNotably, this update also fixes the following bug:\n\n* Previously, when polling CUPS printers from a CUPS server, when a printer\nname contained an underscore (_), the client displayed the name containing\na hyphen (-) instead. This made the print queue unavailable. With this\nupdate, CUPS allows the underscore character in printer names, and printers\nappear as shown on the CUPS server as expected. (BZ#1167408)\n\nIn addition, this update adds the following enhancement:\n\n* Now, the information from local and remote CUPS servers is cached during\neach poll, and the CUPS server load is reduced. (BZ#1191691)\n\nAll cups-filters users are advised to upgrade to these updated packages,\nwhich contain backported patches to correct these issues and add this\nenhancement.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-cr-announce/2015-November/008381.html\n\n**Affected packages:**\ncups-filters\ncups-filters-devel\ncups-filters-libs\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2015-2360.html", "edition": 3, "modified": "2015-11-30T19:26:34", "published": "2015-11-30T19:26:34", "href": "http://lists.centos.org/pipermail/centos-cr-announce/2015-November/008381.html", "id": "CESA-2015:2360", "title": "cups security update", "type": "centos", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "redhat": [{"lastseen": "2019-08-13T18:46:48", "bulletinFamily": "unix", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "The cups-filters packages contain back ends, filters, and other software\nthat was once part of the core Common UNIX Printing System (CUPS)\ndistribution but is now maintained independently.\n\nA heap-based buffer overflow flaw and an integer overflow flaw leading to a\nheap-based buffer overflow were discovered in the way the texttopdf utility\nof cups-filter processed print jobs with a specially crafted line size.\nAn attacker able to submit print jobs could use these flaws to crash\ntexttopdf or, possibly, execute arbitrary code with the privileges of the\n\"lp\" user. (CVE-2015-3258, CVE-2015-3279)\n\nThe CVE-2015-3258 issue was discovered by Petr Sklenar of Red Hat.\n\nNotably, this update also fixes the following bug:\n\n* Previously, when polling CUPS printers from a CUPS server, when a printer\nname contained an underscore (_), the client displayed the name containing\na hyphen (-) instead. This made the print queue unavailable. With this\nupdate, CUPS allows the underscore character in printer names, and printers\nappear as shown on the CUPS server as expected. (BZ#1167408)\n\nIn addition, this update adds the following enhancement:\n\n* Now, the information from local and remote CUPS servers is cached during\neach poll, and the CUPS server load is reduced. (BZ#1191691)\n\nAll cups-filters users are advised to upgrade to these updated packages,\nwhich contain backported patches to correct these issues and add this\nenhancement.", "modified": "2018-04-12T03:32:41", "published": "2015-11-19T18:38:07", "id": "RHSA-2015:2360", "href": "https://access.redhat.com/errata/RHSA-2015:2360", "type": "redhat", "title": "(RHSA-2015:2360) Moderate: cups-filters security, bug fix, and enhancement update", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "ubuntu": [{"lastseen": "2020-07-02T11:37:30", "bulletinFamily": "unix", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "Petr Sklenar discovered that the cups-filters texttopdf filter incorrectly \nhandled line sizes. A remote attacker could use this issue to cause a \ndenial of service, or possibly execute arbitrary code as the lp user. \n(CVE-2015-3258, CVE-2015-3279)", "edition": 5, "modified": "2015-07-06T00:00:00", "published": "2015-07-06T00:00:00", "id": "USN-2659-1", "href": "https://ubuntu.com/security/notices/USN-2659-1", "title": "cups-filters vulnerabilities", "type": "ubuntu", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "debian": [{"lastseen": "2020-11-11T13:19:53", "bulletinFamily": "unix", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "description": "Package : cups\nVersion : 1.4.4-7+squeeze10\nCVE ID : CVE-2015-3258 CVE-2015-3279\n\nPetr Sklenar of Red Hat discovered that the texttopdf tool, part of cups\nfilters, was susceptible to multiple heap-based buffer and integer overflows\ndue to improper handling of print jobs. This could allow remote attackers to\ncrash texttopdf or possibly execute arbitrary code.\n\nFor Debian 6 &quot;Squeeze&quot;, this issue has been fixed in cups version\n1.4.4-7+squeeze10. For Wheezy and Jessie, this has been fixed in the\ncups-filter package. We recommend you to upgrade your cups packages.\n\nLearn more about the Debian Long Term Support (LTS) Project and how to\napply these updates at: https://wiki.debian.org/LTS/\n", "edition": 3, "modified": "2015-09-24T17:46:15", "published": "2015-09-24T17:46:15", "id": "DEBIAN:DLA-314-1:D7B69", "href": "https://lists.debian.org/debian-lts-announce/2015/debian-lts-announce-201509/msg00009.html", "title": "[SECURITY] [DLA 314-1] cups security update", "type": "debian", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "gentoo": [{"lastseen": "2016-09-06T19:46:48", "bulletinFamily": "unix", "cvelist": ["CVE-2015-3258", "CVE-2015-3279"], "edition": 1, "description": "### Background\n\ncups-filters is an OpenPrinting CUPS Filters.\n\n### Description\n\nMultiple vulnerabilities have been discovered in cups-filters. Please review the CVE identifiers referenced below for details. \n\n### Impact\n\nA remote attacker could entice a user to open a specially crafted print job using cups-filters, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. \n\n### Workaround\n\nThere is no known workaround at this time.\n\n### Resolution\n\nAll cups-filters users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=net-print/cups-filters-1.0.71\"", "modified": "2015-10-31T00:00:00", "published": "2015-10-31T00:00:00", "id": "GLSA-201510-08", "href": "https://security.gentoo.org/glsa/201510-08", "type": "gentoo", "title": "cups-filters: Multiple vulnerabilities", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "oraclelinux": [{"lastseen": "2019-05-29T18:39:02", "bulletinFamily": "unix", "cvelist": ["CVE-2015-3258", "CVE-2014-4337", "CVE-2015-3279", "CVE-2014-4338"], "description": "[1.0.35-21]\n- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,\n CVE-2015-3258, CVE-2015-3279).\n[1.0.35-20]\n- Improvements to cups-browsed efficiency patch (bug #1191691).\n[1.0.35-18]\n- Fix segfault in texttopdf filter (bug #1194263).\n- Improve cups-browsed efficiency (bug #1191691).\n- Fetch printer descriptions with cups-browsed (bug #1223719).\n- Fix cups-browsed '_' handling for printer names (bug #1167408).\n[1.0.35-17]\n- Build against newer poppler (bug #1217552).\n[1.0.35-16]\n- Applied upstream patch to fix BrowseAllow parsing issue\n (CVE-2014-4338, bug #1091568).\n- Applied upstream patch for cups-browsed DoS via\n process_browse_data() out-of-bounds read (CVE-2014-4337,\n bug #1111510).", "edition": 4, "modified": "2015-11-23T00:00:00", "published": "2015-11-23T00:00:00", "id": "ELSA-2015-2360", "href": "http://linux.oracle.com/errata/ELSA-2015-2360.html", "title": "cups-filters security, bug fix, and enhancement update", "type": "oraclelinux", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "freebsd": [{"lastseen": "2019-05-29T18:33:12", "bulletinFamily": "unix", "cvelist": ["CVE-2015-3279"], "description": "\nStefan Cornelius from Red Hat reports:\n\nAn integer overflow flaw leading to a heap-based buffer overflow was\n\t discovered in the way the texttopdf utility of cups-filter processed\n\t print jobs with a specially crafted line size. An attacker being able\n\t to submit print jobs could exploit this flaw to crash texttopdf or,\n\t possibly, execute arbitrary code with the privileges of the 'lp' user.\n\nTim Waugh reports:\n\nThe Page allocation is moved into textcommon.c, where it does all the\n\t necessary checking: lower-bounds for CVE-2015-3258 and upper-bounds\n\t for CVE-2015-3259 due to integer overflows for the calloc() call\n\t initializing Page[0] and the memset() call in texttopdf.c's\n\t WritePage() function zeroing the entire array.\n\n", "edition": 5, "modified": "2015-07-07T00:00:00", "published": "2015-07-03T00:00:00", "id": "BF1D9331-21B6-11E5-86FF-14DAE9D210B8", "href": "https://vuxml.freebsd.org/freebsd/bf1d9331-21b6-11e5-86ff-14dae9d210b8.html", "title": "cups-filters -- texttopdf integer overflow", "type": "freebsd", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:33:12", "bulletinFamily": "unix", "cvelist": ["CVE-2015-3258"], "description": "\nStefan Cornelius from Red Hat reports:\n\nA heap-based buffer overflow was discovered in the way the\n\t texttopdf utility of cups-filters processed print jobs with a\n\t specially crafted line size. An attacker being able to submit\n\t print jobs could exploit this flaw to crash texttopdf or,\n\t possibly, execute arbitrary code.\n\nTill Kamppeter reports:\n\ntexttopdf: Fixed buffer overflow on size allocation of texttopdf\n\t when working with extremely small line sizes, which causes the size\n\t calculation to result in 0 (CVE-2015-3258, thanks to Stefan\n\t Cornelius from Red Hat for the patch).\n\n", "edition": 4, "modified": "2015-06-26T00:00:00", "published": "2015-06-26T00:00:00", "id": "B19DA422-1E02-11E5-B43D-002590263BF5", "href": "https://vuxml.freebsd.org/freebsd/b19da422-1e02-11e5-b43d-002590263bf5.html", "title": "cups-filters -- buffer overflow in texttopdf size allocation", "type": "freebsd", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}]}