{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-07-02T00:00:00", "descriptions": [{"lang": "en", "value": "Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-12-23T18:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"name": "USN-2659-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://ubuntu.com/usn/usn-2659-1"}, {"name": "GLSA-201510-08", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201510-08"}, {"name": "[oss-security] 20150703 Re: CVE-2015-3258 CVE-2015-3279 cups-filters", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2015/07/03/5"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1238990"}, {"name": "[oss-security] 20150703 Re: CVE-2015-3258 CVE-2015-3279 cups-filters", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2015/07/03/2"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7365"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7366#NEWS"}, {"name": "openSUSE-SU-2015:1244", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00033.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7369"}, {"name": "DSA-3303", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2015/dsa-3303"}, {"name": "75557", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/75557"}, {"name": "RHSA-2015:2360", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://rhn.redhat.com/errata/RHSA-2015-2360.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2015-3279", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "USN-2659-1", "refsource": "UBUNTU", "url": "http://ubuntu.com/usn/usn-2659-1"}, {"name": "GLSA-201510-08", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201510-08"}, {"name": "[oss-security] 20150703 Re: CVE-2015-3258 CVE-2015-3279 cups-filters", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2015/07/03/5"}, {"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1238990", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1238990"}, {"name": "[oss-security] 20150703 Re: CVE-2015-3258 CVE-2015-3279 cups-filters", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2015/07/03/2"}, {"name": "http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7365", "refsource": "CONFIRM", "url": "http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7365"}, {"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"}, {"name": "http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7366#NEWS", "refsource": "CONFIRM", "url": "http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7366#NEWS"}, {"name": "openSUSE-SU-2015:1244", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00033.html"}, {"name": "http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7369", "refsource": "CONFIRM", "url": "http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7369"}, {"name": "DSA-3303", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2015/dsa-3303"}, {"name": "75557", "refsource": "BID", "url": "http://www.securityfocus.com/bid/75557"}, {"name": "RHSA-2015:2360", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-2360.html"}]}}}}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2015-3279", "datePublished": "2015-07-14T16:00:00", "dateReserved": "2015-04-10T00:00:00", "dateUpdated": "2016-12-23T18:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:linuxfoundation:cups-filters:*:*:*:*:*:*:*:*", "matchCriteriaId": "6AED437C-DE56-4D45-82B6-F1420AB669D8", "versionEndIncluding": "1.0.70", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*", "matchCriteriaId": "49A63F39-30BE-443F-AF10-6245587D3359", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*", "matchCriteriaId": "F38D3B7E-8429-473F-BB31-FC3583EE5A5B", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*", "matchCriteriaId": "7B21E9A8-CE63-42C2-A11A-94D977A96DF1", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow."}, {"lang": "es", "value": "Desbordamiento de enteros en filter/texttopdf.c en texttopdf en cups-filters antes de 1.0.71, que permite a atacantes remotos provocar una denegaci\u00f3n de servicio (colapso) o la posibilidad de ejecutar c\u00f3digo arbitrario por medio de una l\u00ednea larga que contiene caracteres anchos manipulada en un trabajo de impresi\u00f3n, lo que desencadena un desbordamiento del buffer basado en memoria din\u00e1mica."}], "id": "CVE-2015-3279", "lastModified": "2016-12-28T02:59:13.933", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2015-07-14T16:59:03.187", "references": [{"source": "secalert@redhat.com", "url": "http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7365"}, {"source": "secalert@redhat.com", "url": "http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7366#NEWS"}, {"source": "secalert@redhat.com", "url": "http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7369"}, {"source": "secalert@redhat.com", "url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00033.html"}, {"source": "secalert@redhat.com", "url": "http://rhn.redhat.com/errata/RHSA-2015-2360.html"}, {"source": "secalert@redhat.com", "url": "http://ubuntu.com/usn/usn-2659-1"}, {"source": "secalert@redhat.com", "url": "http://www.debian.org/security/2015/dsa-3303"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2015/07/03/2"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2015/07/03/5"}, {"source": "secalert@redhat.com", "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/bid/75557"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1238990"}, {"source": "secalert@redhat.com", "url": "https://security.gentoo.org/glsa/201510-08"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}