CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS amplification attacks.)
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade cups-filters-libsUpgrade cups-filters-develUpgrade cups-filters-debuginfoUpgrade cups-filters | Nov 4, 2024 | Oct 4, 2024 |
| Amazon_linux_2023 | — | Upgrade cups-filters-debuginfoUpgrade cups-filtersUpgrade cups-filters-develUpgrade cups-filters-libsUpgrade cups-filters-debugsourceUpgrade cups-filters-libs-debuginfo | Feb 17, 2025 | Oct 4, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Oct 4, 2024 |
| Oracle_linux | — | Upgrade cups-filters-libsUpgrade cups-filtersUpgrade cups-filters-devel | Jan 23, 2025 | Oct 4, 2024 |
| Redhat_linux | — | Upgrade cups-filters-libs-debuginfoUpgrade cups-filters-libsUpgrade cups-filters-develUpgrade cups-filters-debugsourceUpgrade cups-filters-debuginfoUpgrade cups-filters | Oct 7, 2024 | Oct 4, 2024 |
| Ubuntu | — | Upgrade cups-filters (Ubuntu Pro)Upgrade cups-browsedUpgrade cups-filters | Nov 19, 2024 | Oct 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub