cupspot-2024-47177

CUPS 허니팟 개요 이 프로젝트는 CUPSCommon UNIX Printing System의 취약점에 대한 익스플로잇 시도를 포착하는 허니팟을 구현합니다. 특히 CVE-2024-47177 과 관련된 익스플로잇 시도를 모니터링하도록 설계되었습니다. 이 취약점은 PPD 파일의 FoomaticRIPCommandLine 매개변수를 통해 원격 명령 실행을 가능하게 합니다. 이 매개변수에 악의적인 값이 전달되면 사용자 제어 명령으로 실행되어 심각한 보안 위반을 초래할 수 있습니다. CUPS 및 CVE-2024-47177 CUPS는 다양...

Cups-RCE-Exploit

CUPS RCE Exploit - CVE-2024-47176 Chain Что это такое Полнофункциональный proof-of-concept эксплойт, нацеленный на цепочку уязвимостей удаленного выполнения кода в CUPS Common Unix Printing System, обнаруженную в сентябре 2024 года. Цепочка состоит из четырех CVE — CVE-2024-47176, CVE-2024-47076,...

cupshax

CUPSHax Schneller Proof of Concept für den aktuellen CUPS-Exploit. Ich hatte vor, das Ganze noch viel mehr aufzuräumen, aber die Embargo-Frist wurde viel früher aufgehoben als erwartet, daher ist der Code etwas überstürzt. Für alle technischen Details solltest du ehrlich gesagt einfach Evilsocket...

Astra Linux – Vulnerability in cups

CUPS is a standards-based, open-source printing system, and libppd can be used for supporting legacy PPD files. The ppdCreatePPDFromIPP2 function in libppd does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as cfGetPrinterAttributes5,...

Exploit for Binding to an Unrestricted IP Address in Openprinting Cups-Browsed

CUPS RCE Exploit - CVE-2024-47176 Chain What It Is A full...

CLSA-2026-1777481673 cups: Fix of CVE-2026-34980

CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job...

CLSA-2026-1777480368 cups: Fix of CVE-2026-34980

CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job...

CLSA-2026-1777392623 cups: Fix of CVE-2026-34980

CVE-2026-34980: filter control characters from IPP option values and allowlist PPD keywords returned by filters so a remote attacker cannot inject cupsFilter/cupsFilter2 entries on a shared PostScript queue and gain code execution as the cupsd user...

CLSA-2026-1777042487 Fix CVE(s): CVE-2026-34980

SECURITY UPDATE: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job. - debian/patches/CVE-2026-34980.patch: filter out control characters from IPP option values in scheduler/job.c and filter out special PPD keywords in the CUPSDLOGPPD bran...

OESA-2026-1930 cups security update

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: OpenPrinting CUPS is an open source printing system for Linux and othe...

OSV-2026-551 UNKNOWN WRITE in ___interceptor_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=500762221 Crash type: UNKNOWN WRITE Crash state: interceptorfree ppdClose fuzzppdgen1.c...

CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`

...

CVE-2026-39314 CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, an integer underflow vulnerability in ppdCreateFromIPP cups/ppd-cache.c allows any unprivileged local user to crash the cupsd root process by supplying a negative...

CVE-2026-39314

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, an integer underflow vulnerability in ppdCreateFromIPP cups/ppd-cache.c allows any unprivileged local user to crash the cupsd root process by supplying a negative...

EUVD-2026-19805

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, an integer underflow vulnerability in ppdCreateFromIPP cups/ppd-cache.c allows any unprivileged local user to crash the cupsd root process by supplying a negative...

MiracleLinux 9 : cups-filters-1.28.7-17.el9_4 (AXSA:2024-8862:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8862:03 advisory. cups-browsed: cups-browsed binds on UDP INADDRANY:631 trusting any packet from any source cups-filters: libcupsfilters: cfGetPrinterAttributes API...

MiracleLinux 8 : cups-filters-1.20.0-35.el8_10 (AXSA:2024-8879:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8879:04 advisory. cups-browsed: cups-browsed binds on UDP INADDRANY:631 trusting any packet from any source cups-filters: libcupsfilters: cfGetPrinterAttributes API...

MiracleLinux 9 : cups-2.3.3op2-31.el9 (AXSA:2024-9124:11)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9124:11 advisory. cups: libppd: remote command injection via attacker controlled data in PPD file Tenable has extracted the preceding description block directly from the...

MiracleLinux 3 : foomatic-3.0.2-47.3AX (AXSA:2011-294:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2011-294:01 advisory. Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. It contains utilities to generate driver...

MiracleLinux 8 : cups-2.2.6-62.el8_10 (AXSA:2025-9531:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9531:01 advisory. cups: libppd: remote command injection via attacker controlled data in PPD file CVE-2024-47175 Tenable has extracted the preceding description block directly...