Most recent entries from all

ALSA-2025:0083 — Low: cups security update

Affected: AlmaLinux:8: cups, AlmaLinux:8: cups-client, AlmaLinux:8: cups-devel, AlmaLinux:8: cups-filesystem, AlmaLinux:8: cups-ipptool, AlmaLinux:8: cups-libs, AlmaLinux:8: cups-lpd

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

* cups: libppd: remote command injection via attacker controlled data in PPD file (CVE-2024-47175)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-07645

BELL-CVE-2024-47175

Affected: Alpaquita:23: cups, Alpaquita:stream: cups

certfr-2024-ale-012 — [Mise à jour du 10 octobre 2024] Le 28 septembre 2024, Elastic Security Lab…

certfr-2024-ale-012

certfr-2024-avi-1081 — De multiples vulnérabilités ont été découvertes dans les produits IBM.Certaines d'entre elles permettent à un attaquant…

certfr-2024-avi-1081

cnvd-2024-39404

EUVD-2026-258675

fkie_cve-2024-47175

CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.

OESA-2024-2222 — cups security update

Affected: openEuler:22.03-LTS-SP3: cups

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.. Security Fix(es): CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.(CVE-2024-47175)

openSUSE-SU-2025:15563-1 — cups-filters-1.28.17-5.1 on GA media

cups-filters-1.28.17-5.1 on GA media

RHSA-2024:7461 — Red Hat Security Advisory: cups-filters security update

cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes cups: libppd: remote command injection via attacker controlled data in PPD file cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source cups-browsed: cups-filters: cups-browsed vulnerable to DDoS amplification attack

UBUNTU-CVE-2024-47175

Affected: Ubuntu:Pro:16.04:LTS: cups, Ubuntu:Pro:18.04:LTS: cups, Ubuntu:20.04:LTS: cups, Ubuntu:22.04:LTS: cups, Ubuntu:24.04:LTS: cups, Ubuntu:24.04:LTS: libppd

WID-SEC-W-2024-2240 — CUPS: Mehrere Schwachstellen ermöglichen Ausführung von beliebigem Programmcode

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in CUPS ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen und um Informationen offenzulegen.