AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2015-1158

HIGH · CVSS 10 EPSS 29.91% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-06-26 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

Exhibit — Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗
External Security References
exploit-db.com ↗ exploit-db.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2015-1158
Severity
HIGH
CVSS
10
EPSS
29.91%

Original Filing — NVD Description

The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.