Skip to content
OpenAdvisories
High · 8.6 Public exploit CVE-2024-47076 EUVD-2024-42263

libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server

Published Sep 26, 2024 · Updated Nov 3, 2025 · Assigned by GitHub_M

Vendor: OpenPrinting Product: libcupsfilters Package: cups-filters Package: cups-filters Package: libcupsfilters Package: libcupsfilters Ecosystem: Debian Ecosystem: Ubuntu

Description

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.

Affected products

VendorProductAffectedFixed
OpenPrinting libcupsfilters <= 2.1b1 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 cups-filters 1.28.17-5 —
Debian 14 libcupsfilters 2.0.0-3 —
Debian 13 cups-filters 1.28.17-5 —
Debian 13 libcupsfilters 2.0.0-3 —
Debian 12 cups-filters 1.28.17-3+deb12u1 DSA-5778-1
Debian 11 cups-filters 1.28.7-1+deb11u3 DLA-3905-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS libcupsfilters 2.0.0-0ubuntu7.1 USN-7044-1
Ubuntu 22.04 LTS cups-filters 1.28.15-0ubuntu1.4 USN-7043-4, USN-7043-1
Ubuntu 20.04 LTS cups-filters 1.27.4-1ubuntu0.4 USN-7043-4, USN-7043-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 cups-filters +2 1.28.7-17.el9_4 RHSA-2024:7346
RHEL 8 cups-filters +2 1.20.0-35.el8_10 RHSA-2024:7463
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.2 EUS cups-filters +2 1.28.7-11.el9_2.2 RHSA-2024:7503
RHEL 9.0 E4S cups-filters +1 1.28.7-10.el9_0.2 RHSA-2024:7506
RHEL 8.8 EUS cups-filters +2 1.20.0-29.el8_8.3 RHSA-2024:7462
RHEL 8.6 TUS cups-filters +1 1.20.0-27.el8_6.3 RHSA-2024:7623
RHEL 8.6 E4S cups-filters +1 1.20.0-27.el8_6.3 RHSA-2024:7623
RHEL 8.6 AUS cups-filters +1 1.20.0-27.el8_6.3 RHSA-2024:7623
RHEL 8.4 TUS cups-filters +1 1.20.0-24.el8_4.2 RHSA-2024:7504
RHEL 8.4 E4S cups-filters +1 1.20.0-24.el8_4.2 RHSA-2024:7504
RHEL 8.4 AUS cups-filters +1 1.20.0-24.el8_4.2 RHSA-2024:7504
RHEL 8.2 AUS cups-filters +1 1.20.0-19.el8_2.2 RHSA-2024:7461
RHEL 7.7 AUS cups-filters +2 1.0.35-26.el7_7.3 RHSA-2024:7551
RHEL 7 ELS cups-filters +2 1.0.35-29.el7_9.3 RHSA-2024:7553

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 cups-filters +2 1.28.7-17.el9_4 ALSA-2024:7346
AlmaLinux 8 cups-filters +2 1.20.0-35.el8_10 ALSA-2024:7463

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 cups-filters 1.28.7-17.el9_4 RLSA-2024:7346
Rocky Linux 8 cups-filters 1.20.0-35.el8_10 RLSA-2024:7463

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP6 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
SLES 15 SP5 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
SLES 15 SP4 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
SLES 15 SP3 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
SLES 15 SP2 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
Show 9 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP4 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
SLES for SAP 15 SP3 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
SLES for SAP 15 SP2 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
SLE HPC 15 SP4 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
SLE HPC 15 SP3 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
SLE HPC 15 SP2 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
SUSE Manager Server 4.3 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
SUSE Manager Proxy 4.3 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
SUSE Enterprise Storage 7.1 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed cups-filters 1.28.17-5.1 openSUSE-SU-2025:15563-1
openSUSE Leap 16.0 cups-filters 1.28.17-bp160.2.1 openSUSE-SU-2026:21850-1
openSUSE Leap 15.6 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1
openSUSE Leap 15.5 cups-filters 1.25.0-150200.3.19.2 SUSE-SU-2024:3863-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 cups-filters +2 1.28.16-3.amzn2023.0.3 ALAS2023-2024-723

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 cups-filters +2 1.28.7-17.0.1.el9_4 ELSA-2024-7346
Oracle Linux 8 cups-filters +2 1.20.0-35.0.1.el8_10 ELSA-2024-7463
Oracle Linux 7 cups-filters +2 1.0.35-29.0.3.el7_9 ELSA-2024-7553

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

GitHub 1 repository

  • mutkus/CVE-2024-47076 ★ 0 · Sep 29, 2024

    Linux ve Unix sistemlerinizin CVE-2024-47076 açığından etkilenip etkilenmediğini bu script ile öğrenebilirsiniz.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 28

References