CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-cups-filtersalma-upgrade-cups-filters-develalma-upgrade-cups-filters-libs | Sep 30, 2024 | Sep 26, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-cups-filtersamazon-linux-ami-2-upgrade-cups-filters-debuginfoamazon-linux-ami-2-upgrade-cups-filters-develamazon-linux-ami-2-upgrade-cups-filters-libs | Nov 4, 2024 | Sep 26, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-cups-filtersamazon-linux-2023-upgrade-cups-filters-debuginfoamazon-linux-2023-upgrade-cups-filters-debugsourceamazon-linux-2023-upgrade-cups-filters-develamazon-linux-2023-upgrade-cups-filters-libsamazon-linux-2023-upgrade-cups-filters-libs-debuginfo | Feb 17, 2025 | Sep 26, 2024 | |
| Debian | debian-upgrade-cups-filters | Sep 27, 2024 | Sep 27, 2024 | |
| Freebsd | freebsd-upgrade-package-cups-filtersfreebsd-upgrade-package-cups | Sep 29, 2024 | Sep 27, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-cups-filtersoracle-linux-upgrade-cups-filters-develoracle-linux-upgrade-cups-filters-libs | Oct 16, 2024 | Sep 26, 2024 |
| Redhat_linux | redhat-upgrade-cups-filtersredhat-upgrade-cups-filters-debuginforedhat-upgrade-cups-filters-debugsourceredhat-upgrade-cups-filters-develredhat-upgrade-cups-filters-libsredhat-upgrade-cups-filters-libs-debuginfo | Sep 27, 2024 | Sep 27, 2024 | |
| Rocky_linux | rocky-upgrade-cups-filtersrocky-upgrade-cups-filters-debuginforocky-upgrade-cups-filters-debugsourcerocky-upgrade-cups-filters-develrocky-upgrade-cups-filters-libsrocky-upgrade-cups-filters-libs-debuginfo | Oct 2, 2024 | Sep 26, 2024 | |
| Suse | — | suse-upgrade-cups-filterssuse-upgrade-cups-filters-cups-browsedsuse-upgrade-cups-filters-develsuse-upgrade-cups-filters-foomatic-ripsuse-upgrade-cups-filters-ghostscript | Dec 5, 2025 | Oct 1, 2024 |
| Ubuntu | ubuntu-pro-upgrade-cups-browsedubuntu-pro-upgrade-cups-filtersubuntu-upgrade-cups-browsedubuntu-upgrade-cups-filters | Sep 27, 2024 | Sep 26, 2024 | |
| Unix Cups | misc-no-solution-exists | Sep 26, 2024 | Sep 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub