Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-47076

Date: September 26, 2024

CUPS is a standards-based, open-source printing system, and "libcupsfilters" contains the code of the filters of the former "cups-filters" package as library functions to be used for the data format conversion tasks needed in Printer Applications. The "cfGetPrinterAttributes5" function in "libcupsfilters" does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.

Language: C

Severity Score

Related Resources (10)

https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6
https://security-tracker.debian.org/tracker/CVE-2024-47076
https://nvd.nist.gov/vuln/detail/CVE-2024-47076
https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47
https://www.cups.org
https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5
https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I
https://github.com/OpenPrinting/libcupsfilters/commit/95576ec3d20c109332d14672a807353cdc551018
https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8
https://www.mend.io/vulnerability-database/CVE-2024-47076

Severity Score

Weakness Type (CWE)

Improper Input Validation

CWE-20

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): CHANGED
Confidentiality (C): NONE
Integrity (I): HIGH
Availability (A): NONE

Do you need more information?

Contact Us