The cups-filters package, which contains components formerly part of the core CUPS distribution, has multiple security issues. Specifically, CVE-2024-47076 involves the libcupsfilters cfGetPrinterAttributes API failing to sanitize returned IPP attributes, potentially allowing malicious input to be processed. Additional issues include cups-browsed binding on UDP INADDR_ANY:631 and trusting any packet source, and a remote command injection vulnerability in cups libppd via attacker-controlled data in PPD files. Red Hat has released an update for Red Hat Enterprise Linux 8.8 Extended Update Support to address these vulnerabilities.

These vulnerabilities could allow an attacker to exploit unsanitized IPP attributes, send malicious packets to cups-browsed, or execute remote commands via crafted PPD files. This may lead to unauthorized command execution or other impacts depending on the exploitation of these flaws. The advisory rates the security impact as Important but does not provide a CVSS score.

Red Hat has issued an official security update for cups-filters in Red Hat Enterprise Linux 8.8 Extended Update Support that addresses these vulnerabilities. Users should apply the update as detailed in the Red Hat advisory (https://access.redhat.com/articles/11258) to remediate the issues. No additional mitigation steps are indicated beyond applying the official update.