CVE-2014-8166

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbitrary code via a crafted printer name.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jan 12, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-81675.9vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attackCVE-2014-81686.1Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.CVE-2014-81694.4automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values inCVE-2014-81708.8ovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0-474-gb852fd7 as packaged in Red Hat EnterpCVE-2014-81715.5The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new prCVE-2014-81724.9The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking apCVE-2014-81737.2The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not pCVE-2014-81749.8eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.CVE-2014-81756.0Red Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions and access the HawtIO console by leveraginCVE-2014-81767.5The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structureCVE-2014-81776.5The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users tCVE-2014-81785.5Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes
CVE-2014-8166: High severity, CVSS 8.8 | Vulnix