Skip to content
OpenAdvisories
Medium USN-7043-3 1 CVE

cups-filters vulnerability

Published Oct 7, 2024 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-7043-1 fixed a vulnerability in cups-filters. This update provides
the corresponding update for Ubuntu 16.04 LTS

Original advisory details:

Simone Margaritelli discovered that the cups-filters cups-browsed
component could be used to create arbitrary printers from outside
the local network. In combination with issues in other printing
components, a remote attacker could possibly use this issue to
connect to a system, created manipulated PPD files, and execute
arbitrary code when a printer is used. This update
disables support for the legacy CUPS printer discovery protocol.
(CVE-2024-47176)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS cups-filters 1.8.3-2ubuntu3.5+esm2

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-47176 Public exploit Scanner template EPSS 51%

    cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source

    CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trus…

    OpenPrinting cups-browsed cups-filters cups-filters Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2024-47176