CVE-2024-47176

PoC: cups-browsed 上的未认证远程代码执行 📜 漏洞信息 发布日期 : 2024-09-26 基础评分 : 5.3 中等 EPSS评分 : 0.06% 利用概率 向量 : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 描述 : CUPS 是一个基于标准、开源的打印系统，而 cups-browsed 包含网络打印功能，包括但不限于自动发现打印服务和共享打印机。cups-browsed 绑定到 INADDRANY:631，使其信任来自任何来源的任何数据包，并可能导致 Get-Printer-Attributes IPP...

CVE-2024-47176

CVE-2024-47176 — CUPS RCE 漏洞利用实验环境 网络安全与虚拟化 2025-2026 用于演示 CVE-2024-47176（基于 cups-browsed 的 CUPS 远程代码执行）的隔离实验环境。 设置 所需 VDI Ubuntu 22.04 （非 24.04！）— https://www.osboxes.org/ubuntu/ → VirtualBox（VDI） Kali Linux 2026.1 — https://cdimage.kali.org/kali-2026.1/kali-linux-2026.1-virtualbox-amd64.7z 解压两个...

CVE-2024-47176-Scanner

快速开始 示例用法：python3 cupsscanner.py --targets 10.0.0.0/24 --callback 10.0.0.1:1337 CVE-2024-47176 漏洞扫描器 cups-browsed 什么是 CUPS 以及它为何重要？ CUPS（通用 UNIX 打印系统）是一个开源框架，用于在 UNIX 及类 UNIX 系统上管理和控制打印机。 它是打印领域最广泛使用的库之一，受 UNIX、Linux 及部分苹果设备支持。 CUPS 中发现了多个严重漏洞，串联利用后可导致远程代码执行。 涉及的 CVE...

jugular

jugular 使用 jugs 查找 CUPS：一个超高速 UDP 发送器，试图触发正在监听的 cups-browsed 进程进行 HTTP 回调。 这是一个高性能扫描器，直接向网络写入 UDP 数据包。 安装（Ubuntu 或类似系统） root@kitploit: sudo apt install golang libpcap0.8-dev go install github.com/lkarlslund/jugular@main ... 或从构建产物中下载 Linux x64 二进制文件 用法 1. 为 jugular 授予所需的网络权限 允许 jugular...

CVE-2024-47176

CVE-2024-47176 CUPS（Common UNIX Printing System）は、主にIPP（Internet Printing Protocol）等のプロトコルを使用して印刷ジョブとキューを管理する印刷システムです。 2024年9月27日、Unix...

Astra Linux – Vulnerability in cups-filters

CUPS is a standards-based, open-source printing system. cups-browsed includes network printing functionality, which encompasses, but is not limited to, the ability to automatically discover print services and shared printers. cups-browsed binds to INADDRANY:631, allowing it to accept packets from...

Exploit for Binding to an Unrestricted IP Address in Openprinting Cups-Browsed

No d...

Exploit for Binding to an Unrestricted IP Address in Openprinting Cups-Browsed

dirtycups.py Dirty CUPS is a free Linux/Unix CVE scanner Pytho...

Exploit for Binding to an Unrestricted IP Address in Openprinting Cups-Browsed

CVE-2024-47176 Automated Virtual...

MiracleLinux 8 : cups-filters-1.20.0-35.el8_10 (AXSA:2024-8879:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8879:04 advisory. cups-browsed: cups-browsed binds on UDP INADDRANY:631 trusting any packet from any source cups-filters: libcupsfilters: cfGetPrinterAttributes API...

EulerOS 2.0 SP12 : cups (EulerOS-SA-2026-1065)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe...

TencentOS Server 4: cups-filters (TSSA-2024:0506)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0506 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

EUVD-2014-4264

Malware in sbrugna...

EUVD-2014-4265

Malware in sbrugna...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cups-filters (UTSA-2025-669608)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-669608 advisory. CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be...

CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS amplification attacks.)

...

Linux Distros Unpatched Vulnerability : CVE-2024-47850

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer t...

CUPS IPP Attributes LAN Remote Code Execution

class MetasploitModule Msf::Exploit::Remote Rank = NormalRanking include Exploit::Remote::DNS::Common include Exploit::Remote::SocketServer include Msf::Exploit::Remote::HttpServer::HTML Accessor for IPP HTTP service attraccessor :service2 MULTICASTADDR = '224.0.0.251' Define IPP constants module...

The vulnerability of the cups-browsed service on print servers in CUPS allows a hacker to cause a service failure.

The vulnerability of the cups-browsed service on CUPS printing servers is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures...

Security Bulletin: Multiple Vulnerabilities in IBM Event Endpoint Management

Summary Multiple vulnerabilities were addressed in IBM Event Endpoint Management version 11.3.2 Vulnerability Details CVEID:CVE-2024-47176 DESCRIPTION: OpenPrinting cups-browsed could allow a remote attacker to obtain sensitive information, caused by the binding on UDP INADDRANY:631 and trusting...