The cups-filters package, formerly part of the core CUPS distribution but now maintained independently, contains several security flaws. Notably, CVE-2024-47076 involves the libcupsfilters cfGetPrinterAttributes API failing to sanitize IPP attributes, potentially allowing malicious input to be processed unsafely. Additional issues include cups-browsed binding on UDP INADDR_ANY:631 and trusting any packet source, and a remote command injection vulnerability in cups libppd via attacker-controlled data in PPD files. Red Hat has issued an update for Red Hat Enterprise Linux 7.7 AUS to address these issues.

These vulnerabilities could allow an attacker to exploit unsanitized IPP attributes, send unauthorized packets to cups-browsed, or perform remote command injection via crafted PPD files. This may lead to unauthorized code execution or system compromise on affected systems running vulnerable versions of cups-filters and related components. The advisory rates the impact as Important, indicating significant security concerns.

Red Hat has released an updated cups-filters package for Red Hat Enterprise Linux 7.7 Advanced Update Support that addresses these vulnerabilities. Users should apply the update as detailed in Red Hat advisory RHSA-2024:7551 and the referenced article https://access.redhat.com/articles/11258. No additional mitigations are specified or required beyond applying the official update.