CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cups-filtersUpgrade cups-filters-libsUpgrade cups-filters-devel | Sep 30, 2024 | Sep 26, 2024 |
| Amazon Linux Ami 2 | — | Upgrade cups-filters-libsUpgrade cups-filters-develUpgrade cups-filters-debuginfoUpgrade cups-filters | Nov 4, 2024 | Sep 26, 2024 |
| Amazon_linux_2023 | — | Upgrade cups-filters-debuginfoUpgrade cups-filters-libsUpgrade cups-filters-debugsourceUpgrade cups-filters-libs-debuginfoUpgrade cups-filtersUpgrade cups-filters-devel | Feb 17, 2025 | Sep 26, 2024 |
| Debian | — | Upgrade cups-filters | Sep 27, 2024 | Sep 27, 2024 |
| Freebsd | — | Upgrade cupsUpgrade cups-filters | Sep 29, 2024 | Sep 27, 2024 |
| Oracle_linux | — | Upgrade cups-filtersUpgrade cups-filters-libsUpgrade cups-filters-devel | Oct 16, 2024 | Sep 26, 2024 |
| Redhat_linux | — | Upgrade cups-filters-develUpgrade cups-filters-libs-debuginfoUpgrade cups-filters-debugsourceUpgrade cups-filtersUpgrade cups-filters-debuginfoUpgrade cups-filters-libs | Sep 27, 2024 | Sep 27, 2024 |
| Rocky_linux | — | Upgrade cups-filters-libs-debuginfoUpgrade cups-filtersUpgrade cups-filters-develUpgrade cups-filters-libsUpgrade cups-filters-debuginfoUpgrade cups-filters-debugsource | Oct 2, 2024 | Sep 26, 2024 |
| Suse | — | Upgrade cups-filters-cups-browsedUpgrade cups-filters-foomatic-ripUpgrade cups-filters-develUpgrade cups-filtersUpgrade cups-filters-ghostscript | Dec 5, 2025 | Oct 1, 2024 |
| Ubuntu | — | Upgrade cups-filters (Ubuntu Pro)Upgrade cups-filtersUpgrade cups-browsedUpgrade cups-browsed (Ubuntu Pro) | Sep 27, 2024 | Sep 26, 2024 |
| Unix Cups | — | No fixes or workaround suggested by the vendor | Sep 26, 2024 | Sep 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub