The cups-filters package, formerly part of the core CUPS distribution and now maintained independently, contains several security flaws. Notably, CVE-2024-47076 involves the libcupsfilters cfGetPrinterAttributes API failing to sanitize returned IPP attributes, potentially leading to security risks. Additional issues include cups-browsed binding on UDP INADDR_ANY:631 and trusting any packet source, and a remote command injection vulnerability in cups libppd via attacker-controlled data in PPD files. Red Hat has issued an important security advisory RHSA-2024:7551 with updated packages for Red Hat Enterprise Linux Server AUS 7.7 to address these vulnerabilities.

These vulnerabilities could allow an attacker to exploit the printing system by injecting malicious commands or manipulating printer attributes without proper sanitization. This could lead to unauthorized command execution or other security breaches related to the printing subsystem. The advisory rates the impact as Important, indicating a significant security risk that requires attention.

Red Hat has released updated cups-filters packages for Red Hat Enterprise Linux Server AUS 7.7 that address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2024:7551 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patches.