Description
CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS amplification attacks.)
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | cups-filters | No fix yet | — |
| Debian 13 | cups-filters | No fix yet | — |
| Debian 12 | cups-filters | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | cups-browsed | 2.0.0-0ubuntu10.1 | — |
| Ubuntu 22.04 LTS | cups-filters | 1.28.15-0ubuntu1.3 | — |
| Ubuntu 20.04 LTS | cups-filters | 1.27.4-1ubuntu0.3 | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | cups-filters | 1.20.2-0ubuntu3.3+esm1 | — |
| Ubuntu Pro 16.04 LTS | cups-filters | 1.8.3-2ubuntu3.5+esm2 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | cups-filters +2 | 1.28.7-17.el9_4 | RHSA-2024:7346 |
| RHEL 8 | cups-filters +2 | 1.20.0-35.el8_10 | RHSA-2024:7463 |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | cups-filters +2 | 1.28.7-11.el9_2.2 | RHSA-2024:7503 |
| RHEL 9.0 E4S | cups-filters +1 | 1.28.7-10.el9_0.2 | RHSA-2024:7506 |
| RHEL 8.8 EUS | cups-filters +2 | 1.20.0-29.el8_8.3 | RHSA-2024:7462 |
| RHEL 8.6 TUS | cups-filters +1 | 1.20.0-27.el8_6.3 | RHSA-2024:7623 |
| RHEL 8.6 E4S | cups-filters +1 | 1.20.0-27.el8_6.3 | RHSA-2024:7623 |
| RHEL 8.6 AUS | cups-filters +1 | 1.20.0-27.el8_6.3 | RHSA-2024:7623 |
| RHEL 8.4 TUS | cups-filters +1 | 1.20.0-24.el8_4.2 | RHSA-2024:7504 |
| RHEL 8.4 E4S | cups-filters +1 | 1.20.0-24.el8_4.2 | RHSA-2024:7504 |
| RHEL 8.4 AUS | cups-filters +1 | 1.20.0-24.el8_4.2 | RHSA-2024:7504 |
| RHEL 8.2 AUS | cups-filters +1 | 1.20.0-19.el8_2.2 | RHSA-2024:7461 |
| RHEL 7.7 AUS | cups-filters +2 | 1.0.35-26.el7_7.3 | RHSA-2024:7551 |
| RHEL 7 ELS | cups-filters +2 | 1.0.35-29.el7_9.3 | RHSA-2024:7553 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | cups-filters +2 | 1.20.0-35.el8_10 | ALSA-2024:7463 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
| SLES 15 SP5 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
| SLES 15 SP4 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
| SLES 15 SP3 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
| SLES 15 SP2 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | cups-filters | 1.0.58-19.26.1 | SUSE-SU-2024:3756-1, SUSE-SU-2024:3711-1, SUSE-SU-2024:3570-1 |
| SLES 12 SP5 | poppler +1 | 0.43.0-16.49.1 | SUSE-SU-2024:3570-1 |
| SLES for SAP 15 SP4 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
| SLES for SAP 15 SP3 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
| SLES for SAP 15 SP2 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
| SLES for SAP 12 SP5 | cups-filters | 1.0.58-19.26.1 | SUSE-SU-2024:3711-1, SUSE-SU-2024:3570-1 |
| SLES for SAP 12 SP5 | poppler +1 | 0.43.0-16.49.1 | SUSE-SU-2024:3570-1 |
| SLE HPC 15 SP4 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
| SLE HPC 15 SP3 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
| SLE HPC 15 SP2 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
| SUSE Manager Server 4.3 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
| SUSE Manager Proxy 4.3 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
| SUSE Enterprise Storage 7.1 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | cups-filters | 1.28.17-5.1 | openSUSE-SU-2025:15563-1 |
| openSUSE Leap 16.0 | cups-filters | 1.28.17-bp160.2.1 | openSUSE-SU-2026:21850-1 |
| openSUSE Leap 15.6 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
| openSUSE Leap 15.5 | cups-filters | 1.25.0-150200.3.19.2 | SUSE-SU-2024:3863-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | cups-filters +2 | 1.28.16-3.amzn2023.0.3 | ALAS2023-2024-723 |
| Amazon Linux 2 | cups-filters +2 | 1.0.35-26.amzn2.0.1 | ALAS2-2024-2656 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | cups | 1.28.17-3 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | cups-filters +2 | 1.0.35-29.0.3.el7_9 | ELSA-2024-7553 |
Advisories 21
- RHSA-2024:7503 Red Hat Security Advisory: cups-filters security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- ALSA-2024:7463 Important: cups-filters security update AlmaLinux Security Advisories · Oct 29, 2026
- openSUSE-SU-2026:21850-1 Security update for cups-filters SUSE / openSUSE Security Updates · Sep 15, 2026
- RHSA-2024:7623 Red Hat Security Advisory: cups-filters security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2024:7553 Red Hat Security Advisory: cups-filters security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2024:7551 Red Hat Security Advisory: cups-filters security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2024:7506 Red Hat Security Advisory: cups-filters security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2024:7504 Red Hat Security Advisory: cups-filters security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2024:7462 Red Hat Security Advisory: cups-filters security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2024:7463 Red Hat Security Advisory: cups-filters security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2024:7461 Red Hat Security Advisory: cups-filters security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2024:7346 Red Hat Security Advisory: cups-filters security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- openSUSE-SU-2025:15563-1 cups-filters-1.28.17-5.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2024:3711-1 Security update for cups-filters SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3863-1 Security update for cups-filters SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3756-1 Security update for cups-filters SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3570-1 Security update for cups-filters SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-3069 CUPS: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Aug 4, 2025
- ALAS2023-2024-723 Moderate: cups-filters security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Nov 13, 2024
- ELSA-2024-7553 Important: cups-filters security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 13, 2024
- ALAS2-2024-2656 Moderate: cups-filters security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 31, 2024