This vulnerability in libcupsfilters affects the cfIEEE1284NormalizeMakeModel() function, which processes IEEE-1284 device IDs advertised by printers. When the model field in the device ID is empty, the function enters an infinite loop, causing sustained CPU resource consumption. The flaw can be triggered by a network-adjacent attacker broadcasting a malicious printer advertisement, resulting in denial of service. The affected component, cups-browsed, is disabled by default in Red Hat Enterprise Linux 10, reducing the attack surface. Red Hat classifies the impact as Moderate due to this default configuration. No official fix or patch is currently stated in the advisory. Mitigation involves disabling the cups-browsed service if automatic network printer discovery is not needed or restricting access from untrusted networks if the service must be used.

The vulnerability causes an infinite loop in libcupsfilters, leading to sustained CPU consumption and denial of service on affected systems. Since cups-browsed is disabled by default in Red Hat Enterprise Linux 10, the risk is reduced for default installations. However, if cups-browsed is enabled and exposed to untrusted networks, a network-adjacent attacker could exploit this to exhaust CPU resources and disrupt service availability.

Red Hat advises that if automatic network printer discovery is not required, the cups-browsed service should be stopped to eliminate the vulnerable attack surface. If cups-browsed is necessary for operational reasons, network access to the daemon should be restricted to trusted networks only. No official patch or fix is currently available; users should monitor the Red Hat advisory for updates.