CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cups-filters-libsUpgrade cups-filtersUpgrade cups-filters-devel | Sep 30, 2024 | Sep 26, 2024 |
| Amazon Linux Ami 2 | — | Upgrade cups-filtersUpgrade cups-filters-debuginfoUpgrade cups-filters-libsUpgrade cups-filters-devel | Nov 4, 2024 | Sep 26, 2024 |
| Amazon_linux_2023 | — | Upgrade cups-filters-debugsourceUpgrade cups-filtersUpgrade cups-filters-libs-debuginfoUpgrade cups-filters-develUpgrade cups-filters-libsUpgrade cups-filters-debuginfo | Feb 17, 2025 | Sep 26, 2024 |
| Debian | — | Upgrade cups-filters | Sep 27, 2024 | Sep 27, 2024 |
| Freebsd | — | Upgrade cupsUpgrade cups-filters | Sep 29, 2024 | Sep 27, 2024 |
| Oracle_linux | — | Upgrade cups-filtersUpgrade cups-filters-libsUpgrade cups-filters-devel | Oct 16, 2024 | Sep 26, 2024 |
| Redhat_linux | — | Upgrade cups-filtersUpgrade cups-filters-libsUpgrade cups-filters-debuginfoUpgrade cups-filters-debugsourceUpgrade cups-filters-develUpgrade cups-filters-libs-debuginfo | Sep 27, 2024 | Sep 27, 2024 |
| Rocky_linux | — | Upgrade cups-filters-libs-debuginfoUpgrade cups-filters-libsUpgrade cups-filters-debuginfoUpgrade cups-filters-debugsourceUpgrade cups-filters-develUpgrade cups-filters | Oct 2, 2024 | Sep 26, 2024 |
| Suse | — | Upgrade cups-filters-foomatic-ripUpgrade cups-filters-cups-browsedUpgrade cups-filters-develUpgrade cups-filters-ghostscriptUpgrade cups-filters | Dec 5, 2025 | Oct 1, 2024 |
| Ubuntu | — | Upgrade cups-filtersUpgrade cups-filters (Ubuntu Pro)Upgrade cups-browsed (Ubuntu Pro)Upgrade cups-browsed | Sep 27, 2024 | Sep 26, 2024 |
| Unix Cups | — | No fixes or workaround suggested by the vendor | Sep 26, 2024 | Sep 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub