The cups-filters package, formerly part of the core CUPS distribution and now maintained independently, contains several security flaws. Notably, CVE-2024-47076 involves the libcupsfilters cfGetPrinterAttributes API failing to sanitize IPP attributes, potentially allowing malicious input to be processed. Additional vulnerabilities include cups-browsed binding to UDP INADDR_ANY:631 and trusting any packet source, and a remote command injection vulnerability via attacker-controlled data in PPD files within cups libppd. Red Hat has released patches for these issues in Red Hat Enterprise Linux 8, covering multiple architectures and variants.

If exploited, these vulnerabilities could allow an attacker to manipulate printing system attributes or execute remote commands via crafted PPD files, potentially leading to unauthorized actions on affected systems. The failure to sanitize IPP attributes may allow injection of malicious data. The cups-browsed issue could allow unauthorized network packets to influence the service. However, no known exploits in the wild have been reported at this time.

Red Hat has released an official security update (RHSA-2024:7463) that addresses these vulnerabilities. Users of Red Hat Enterprise Linux 8 should apply the provided cups-filters package update promptly to remediate the issues. Detailed update instructions are available from Red Hat's advisory and knowledge base article. No additional mitigation steps are indicated beyond applying the official patch.