CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cups-filters-develUpgrade cups-filtersUpgrade cups-filters-libs | Sep 30, 2024 | Sep 26, 2024 |
| Amazon Linux Ami 2 | — | Upgrade cups-filters-debuginfoUpgrade cups-filtersUpgrade cups-filters-develUpgrade cups-filters-libs | Nov 4, 2024 | Sep 26, 2024 |
| Amazon_linux_2023 | — | Upgrade cups-filters-debuginfoUpgrade cups-filters-develUpgrade cups-filtersUpgrade cups-filters-libsUpgrade cups-filters-libs-debuginfoUpgrade cups-filters-debugsource | Feb 17, 2025 | Sep 26, 2024 |
| Debian | — | Upgrade cups-filters | Sep 27, 2024 | Sep 27, 2024 |
| Freebsd | — | Upgrade cups-filtersUpgrade cups | Sep 29, 2024 | Sep 27, 2024 |
| Oracle_linux | — | Upgrade cups-filtersUpgrade cups-filters-libsUpgrade cups-filters-devel | Oct 16, 2024 | Sep 26, 2024 |
| Redhat_linux | — | Upgrade cups-filters-debuginfoUpgrade cups-filters-debugsourceUpgrade cups-filtersUpgrade cups-filters-libsUpgrade cups-filters-develUpgrade cups-filters-libs-debuginfo | Sep 27, 2024 | Sep 27, 2024 |
| Rocky_linux | — | Upgrade cups-filters-debugsourceUpgrade cups-filters-develUpgrade cups-filters-debuginfoUpgrade cups-filtersUpgrade cups-filters-libsUpgrade cups-filters-libs-debuginfo | Oct 2, 2024 | Sep 26, 2024 |
| Suse | — | Upgrade cups-filtersUpgrade cups-filters-develUpgrade cups-filters-ghostscriptUpgrade cups-filters-foomatic-ripUpgrade cups-filters-cups-browsed | Dec 5, 2025 | Oct 1, 2024 |
| Ubuntu | — | Upgrade cups-browsedUpgrade cups-browsed (Ubuntu Pro)Upgrade cups-filtersUpgrade cups-filters (Ubuntu Pro) | Sep 27, 2024 | Sep 26, 2024 |
| Unix Cups | — | No fixes or workaround suggested by the vendor | Sep 26, 2024 | Sep 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub