CVE编号
CVE-2015-8560利用情况
暂无补丁情况
官方补丁披露时间
2016-04-15漏洞描述
Foomatic是Linux基金会的OpenPrinting工作组所负责开发的一套数据库驱动的打印系统，它将Unix下的通用后台打印系统与开源的打印机驱动整合在一起。foomatic-rip（又名foomatic-filters）是其中的一个帮助后台打印系统将PostScript转成打印机语言的内部组件。foomatic-rip中存在安全漏洞，该漏洞源于程序未删除用于构造命令行的全部shell特殊字符。攻击者可利用该漏洞执行任意命令。
解决建议
目前厂商已经发布了升级补丁以修复此安全问题，详情请关注厂商主页：http://www.linuxfoundation.org/collaborate/workgroups/openprinting/databasefoomatic
参考链接 |
|
|---|---|
| http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/annotate/... | |
| http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7419 | |
| http://rhn.redhat.com/errata/RHSA-2016-0491.html | |
| http://www.debian.org/security/2015/dsa-3419 | |
| http://www.debian.org/security/2015/dsa-3429 | |
| http://www.openwall.com/lists/oss-security/2015/12/13/2 | |
| http://www.openwall.com/lists/oss-security/2015/12/14/13 | |
| http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html | |
| http://www.ubuntu.com/usn/USN-2838-1 | |
| http://www.ubuntu.com/usn/USN-2838-2 |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.42 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.43 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.44 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.45 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.46 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.47 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.48 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.49 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.50 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.51 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.52 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.53 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.54 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.55 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.56 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.57 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.58 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.59 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.60 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.61 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.62 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.63 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.64 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.65 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.66 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.67 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.68 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.69 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.70 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.71 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.72 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.73 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.74 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.75 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.0.76 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.1.0 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.2.0 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | cups-filters | 1.3.0 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.0 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.1 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.10 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.11 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.12 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.13 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.14 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.15 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.16 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.17 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.2 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.3 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.4 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.5 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.6 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.7 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.8 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | linuxfoundation | foomatic-filters | 4.0.9 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | amazon linux_AMI | foomatic | * |
Up to (excluding) 4.0.4-5.11.amzn1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | amazon_AMI | foomatic | * |
Up to (excluding) 4.0.4-5.11.amzn1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canonical | ubuntu_linux | 12.04 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | canonical | ubuntu_linux | 14.04 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | canonical | ubuntu_linux | 15.04 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | canonical | ubuntu_linux | 15.10 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | centos_6 | foomatic | * |
Up to (excluding) 4.0.4-5.el6_7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | debian | debian_linux | 8.0 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | debian | DPKG | * |
Up to (excluding) 1.4.0-1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | debian_6 | foomatic | * |
Up to (excluding) 4.0.5-6+squeeze2+deb6u12 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | debian_7 | foomatic | * |
Up to (excluding) 4.0.17-1+deb7u1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | debian_8 | foomatic | * |
Up to (excluding) 1.0.61-5+deb8u1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_22 | foomatic | * |
Up to (excluding) 1.4.0-1.fc22 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_23 | foomatic | * |
Up to (excluding) 1.4.0-1.fc23 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_13.2 | foomatic | * |
Up to (excluding) 1.0.58-2.11.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | oracle linux_6 | foomatic | * |
Up to (excluding) 4.0.4-5.el6_7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | oracle_6 | foomatic | * |
Up to (excluding) 4.0.4-5.el6_7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | redhat_6 | foomatic | * |
Up to (excluding) 0:4.0.4-5.el6_7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | sles_11_SP3 | foomatic | * |
Up to (excluding) 3.0.2-269.39.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | sles_11_SP4 | foomatic | * |
Up to (excluding) 3.0.2-269.39.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | sles_12 | cups-filters | * |
Up to (excluding) 1.0.58-13 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | suse_11_SP3 | foomatic | * |
Up to (excluding) 3.0.2-269.39.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | suse_11_SP4 | foomatic | * |
Up to (excluding) 3.0.2-269.39.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | ubuntu_12.04_lts | foomatic-filters | * |
Up to (excluding) 4.0.16-0ubuntu0.4 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | ubuntu_14.04_lts | cups-filters | * |
Up to (excluding) 1.0.52-0ubuntu1.7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | ubuntu_16.04_lts | cups-filters | * |
Up to (excluding) 1.4.0-1 |
|||||
- 攻击路径 远程
- 攻击复杂度 复杂
- 权限要求 无需权限
- 影响范围 有限影响
- EXP成熟度 未验证
- 补丁情况 官方补丁
- 数据保密性 无影响
- 数据完整性 无影响
- 服务器危害 无影响
- 全网数量 100
还没有评论，来说两句吧...