Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : CUPS vulnerability (USN-7041-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7041-1 advisory. Simone Margaritelli discovered that CUPS incorrectly sanitized IPP data when creating PPD files. A remote attacker could possibly use this...

Ubuntu: Security Advisory (USN-7041-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7042-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CUPS Multiple Vulnerabilities (Sep/Oct 2024)

Various components of CUPS are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ubuntu: Security Advisory (USN-7043-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CUPS libppd Input Validation Error Vulnerability

CUPS is a standards-based open source printing system. An input validation error vulnerability exists in CUPS libppd, which can be exploited by an attacker to execute arbitrary code on the system...

CUPS libcupsfilters Input Validation Error Vulnerability

CUPS is a standards-based open source printing system. An input validation error vulnerability exists in CUPS libcupsfilters, which can be exploited by an attacker to bypass security restrictions, add a malicious printer or directly hijack an existing printer...

Important: cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System CUPS distribution but is now maintained independently. Security Fixes: cups-browsed: cups-browsed binds on UDP INADDRANY:631 trusting any packet from any source...

CUPS cups-browsed Remote Unauthenticated Printer Registration (CVE-2024-47176)

Binary data cupsCVE-2024-47176.nbin...

RHEL OpenPrinting cups-filters (RHSB-2024:002)

Binary data redhat-RHSB-2024-002.nbin...

Ubuntu 20.04 LTS / 22.04 LTS : cups-filters vulnerabilities (USN-7043-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7043-1 advisory. Simone Margaritelli discovered that the cups-filters cups-browsed component could be used to create arbitrary printers from outside the local...

The vulnerability of the foomatic-rip filter in the cups-filters printing package allows a hacker to execute arbitrary code.

The vulnerability of the foomatic-rip filter in the cups-filters printing package is related to the lack of measures taken to sanitize input data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CUPS cups-filters command injection vulnerability

CUPS is a standards-based open source printing system. A command injection vulnerability exists in CUPS cups-filters, which can be exploited by an attacker to inject and execute arbitrary commands on the system...

Multiple Vulnerabilities in Common Unix Printing System (CUPS)

On Thursday, September 26, 2024, a security researcher publicly disclosed several vulnerabilities affecting different components of OpenPrinting’s CUPS Common Unix Printing System. CUPS is a popular IPP-based open-source printing system primarily but not only for Linux and UNIX-like operating...

CVE-2024-47177

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or...

DEBIAN-CVE-2024-47175

CUPS is a standards-based, open-source printing system, and libppd can be used for legacy PPD file support. The libppd function ppdCreatePPDFromIPP2 does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as cfGetPrinterAttributes5, can...

CVE-2024-47177

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of...

CVE-2024-47076

CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former cups-filters package as library functions to be used for the data format conversion tasks needed in Printer Applications. The cfGetPrinterAttributes5 function in libcupsfilter...

CVE-2024-47175

CUPS is a standards-based, open-source printing system, and libppd can be used for legacy PPD file support. The libppd function ppdCreatePPDFromIPP2 does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as cfGetPrinterAttributes5, can...

CVE-2024-47176

CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. cups-browsed binds to INADDRANY:631, causing it to trust any packet from any source, and can cause t...