CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cups-filtersUpgrade cups-filters-develUpgrade cups-filters-libs | Sep 30, 2024 | Sep 26, 2024 |
| Amazon_linux_2023 | — | Upgrade cups-filtersUpgrade cups-filters-debugsourceUpgrade cups-filters-debuginfoUpgrade cups-filters-develUpgrade cups-filters-libsUpgrade cups-filters-libs-debuginfo | Feb 17, 2025 | Sep 26, 2024 |
| Debian | — | Upgrade libcupsfiltersUpgrade cups-filters | Sep 27, 2024 | Sep 27, 2024 |
| Freebsd | — | Upgrade cups-filtersUpgrade cups | Sep 29, 2024 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cups-filters-libsUpgrade cups-filters | Jan 21, 2025 | Sep 26, 2024 |
| Oracle_linux | — | Upgrade cups-filtersUpgrade cups-filters-libsUpgrade cups-filters-devel | Oct 16, 2024 | Sep 26, 2024 |
| Redhat_linux | — | Upgrade cups-filtersUpgrade cups-filters-libs-debuginfoUpgrade cups-filters-debuginfoUpgrade cups-filters-debugsourceUpgrade cups-filters-develUpgrade cups-filters-libs | Sep 27, 2024 | Sep 27, 2024 |
| Rocky_linux | — | Upgrade cups-filters-libsUpgrade cups-filters-libs-debuginfoUpgrade cups-filters-develUpgrade cups-filters-debugsourceUpgrade cups-filtersUpgrade cups-filters-debuginfo | Oct 2, 2024 | Sep 26, 2024 |
| Suse | — | Upgrade cups-filtersUpgrade cups-filters-devel | Dec 5, 2025 | Oct 1, 2024 |
| Ubuntu | — | Upgrade cups-browsedUpgrade libcupsfilters2-commonUpgrade libcupsfilters2t64Upgrade cups-filters | Sep 27, 2024 | Sep 26, 2024 |
| Unix Cups | — | No fixes or workaround suggested by the vendor | Sep 26, 2024 | Sep 26, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub