https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T08:18:33.923535+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2015-1158 CVE-2015-1158 2026-10-03T08:18:34.771241+00:00

The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.

 https://vulnerability.circl.lu/vuln/usn-2629-1 USN-2629-1 — cups vulnerabilities 2026-10-03T08:18:34.771341+00:00

Affected: Ubuntu:14.04:LTS: cups

It was discovered that CUPS incorrectly handled reference counting when handling localized strings. A remote attacker could use this issue to escalate permissions, upload a replacement CUPS configuration file, and execute arbitrary code. (CVE-2015-1158)

It was discovered that the CUPS templating engine contained a cross-site scripting issue. A remote attacker could use this issue to bypass default configuration settings. (CVE-2015-1159)