The cups-filters package, which includes back ends and filters for printing formerly part of CUPS, contains multiple security vulnerabilities. CVE-2024-47076 involves the libcupsfilters cfGetPrinterAttributes API failing to sanitize returned IPP attributes. CVE-2024-47175 is a remote command injection vulnerability via attacker-controlled data in PPD files within the cups libppd component. CVE-2024-47176 concerns cups-browsed binding on UDP INADDR_ANY:631 and trusting any packet from any source, leading to potential misuse. CVE-2024-47850 is a DDoS amplification vulnerability in cups-browsed. Red Hat has released security updates for Red Hat Enterprise Linux 7 Extended Lifecycle Support that address these vulnerabilities. The advisory references specific bugzilla entries and provides packages for patching. No CVSS scores are provided in the advisory, but the severity is rated as important by Red Hat.

These vulnerabilities could allow an attacker to perform remote command injection (CVE-2024-47175), potentially execute unauthorized commands via crafted PPD files, exploit the lack of sanitization in IPP attributes (CVE-2024-47076), and abuse cups-browsed for DDoS amplification attacks (CVE-2024-47850 and CVE-2024-47176). The impact includes possible remote code execution and denial of service conditions. The Red Hat advisory rates the overall security impact as important, indicating significant risk if unpatched.

Red Hat has released updated packages for cups-filters in Red Hat Enterprise Linux 7 Extended Lifecycle Support that address these vulnerabilities. Users should apply the security update RHSA-2024:7553 as detailed in the Red Hat advisory (https://access.redhat.com/errata/RHSA-2024:7553) and related documentation (https://access.redhat.com/articles/11258). Applying these official patches mitigates the vulnerabilities. No additional vendor-recommended mitigations or workarounds are indicated in the advisory.