CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cups-filters-develUpgrade cups-filtersUpgrade cups-filters-libs | Sep 30, 2024 | Sep 26, 2024 |
| Amazon Linux Ami 2 | — | Upgrade cups-filters-libsUpgrade cups-filters-develUpgrade cups-filters-debuginfoUpgrade cups-filters | Nov 4, 2024 | Sep 26, 2024 |
| Amazon_linux_2023 | — | Upgrade cups-filters-libs-debuginfoUpgrade cups-filters-libsUpgrade cups-filters-debugsourceUpgrade cups-filters-develUpgrade cups-filtersUpgrade cups-filters-debuginfo | Feb 17, 2025 | Sep 26, 2024 |
| Debian | — | Upgrade cups-filters | Sep 27, 2024 | Sep 27, 2024 |
| Freebsd | — | Upgrade cups-filtersUpgrade cups | Sep 29, 2024 | Sep 27, 2024 |
| Oracle_linux | — | Upgrade cups-filtersUpgrade cups-filters-libsUpgrade cups-filters-devel | Oct 16, 2024 | Sep 26, 2024 |
| Redhat_linux | — | Upgrade cups-filtersUpgrade cups-filters-libsUpgrade cups-filters-debugsourceUpgrade cups-filters-debuginfoUpgrade cups-filters-libs-debuginfoUpgrade cups-filters-devel | Sep 27, 2024 | Sep 27, 2024 |
| Rocky_linux | — | Upgrade cups-filters-libs-debuginfoUpgrade cups-filters-debugsourceUpgrade cups-filters-debuginfoUpgrade cups-filtersUpgrade cups-filters-libsUpgrade cups-filters-devel | Oct 2, 2024 | Sep 26, 2024 |
| Suse | — | Upgrade cups-filters-ghostscriptUpgrade cups-filtersUpgrade cups-filters-develUpgrade cups-filters-cups-browsedUpgrade cups-filters-foomatic-rip | Dec 5, 2025 | Oct 1, 2024 |
| Ubuntu | — | Upgrade cups-filters (Ubuntu Pro)Upgrade cups-filtersUpgrade cups-browsedUpgrade cups-browsed (Ubuntu Pro) | Sep 27, 2024 | Sep 26, 2024 |
| Unix Cups | — | No fixes or workaround suggested by the vendor | Sep 26, 2024 | Sep 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub