GCVE - cpe:2.3:a:linuxfoundation:foomatic-filters:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:linuxfoundation:foomatic-filters:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Linuxfoundation (`4b459c90-8cdb-5268-beb4-b69b5fe74234`)
Product	Foomatic Filters (`fecb9840-13af-5a3b-a0c4-0f0ccf2a580b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/foomatic-filters`	purl2cpe	2026-06-01 10:13:21.333003
`pkg:deb/ubuntu/foomatic-filters`	purl2cpe	2026-06-01 10:13:21.333006
`pkg:github/distrotech/foomatic-filters`	purl2cpe	2026-06-01 10:13:21.333009
`pkg:rpm/centos/foomatic-filters`	purl2cpe	2026-06-01 10:13:21.333012
`pkg:rpm/opensuse/foomatic-filters`	purl2cpe	2026-06-01 10:13:21.333015

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-2924`	vulnerable	2026-06-08 04:58:09.657818	Details available foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter. Published: 2019-11-19T21:20:16.000Z Updated: 2024-08-06T23:15:31.864Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2011-2924 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2924 https://access.redhat.com/security/cve/cve-2011-2924 https://www.openwall.com/lists/oss-security/2014/02/08/5/1 https://lwn.net/Articles/459979/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2923`	vulnerable	2026-06-08 04:58:09.657287	Details available foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter. Published: 2019-11-19T20:38:08.000Z Updated: 2024-08-06T23:15:31.690Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2011-2923 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2923 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-2923 https://access.redhat.com/security/cve/cve-2011-2923	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5325`	vulnerable	2026-06-08 04:56:32.745330	Details available Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title. Published: 2016-04-15T14:00:00.000Z Updated: 2024-08-07T04:17:10.191Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1218297 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html http://bzr.linuxfoundation.org/loggerhead/openprinting/foomatic-4.0/foomatic-filters/annotate/head:/ChangeLog https://bugs.linuxfoundation.org/show_bug.cgi?id=515 http://rhn.redhat.com/errata/RHSA-2016-0491.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.