Red Hat Security Advisory: cups-filters security update
The cups-filters package, formerly part of the core CUPS distribution and now maintained independently, has multiple security issues including a lack of sanitization in the cfGetPrinterAttributes API (CVE-2024-47076), a vulnerability in cups-browsed trusting any UDP packet on port 631, and a remote command injection vulnerability in libppd. These issues affect Red Hat Enterprise Linux 9 and related variants. Red Hat has issued a security advisory with updates to address these vulnerabilities.
AI Analysis
Technical Summary
This Red Hat security advisory addresses multiple vulnerabilities in the cups-filters package and related components. The cfGetPrinterAttributes API in libcupsfilters does not sanitize returned IPP attributes (CVE-2024-47076), potentially allowing malicious data to be processed. Additionally, cups-browsed binds on UDP INADDR_ANY:631 and trusts packets from any source, and libppd in cups is vulnerable to remote command injection via attacker-controlled data in PPD files. These vulnerabilities affect Red Hat Enterprise Linux 9 and its Extended Update Support and Extended Life Cycle variants across multiple architectures. Red Hat has released updated packages to fix these issues as detailed in advisory RHSA-2024:7346.
Potential Impact
The vulnerabilities could allow an attacker to exploit unsanitized IPP attributes, potentially leading to unintended behavior or information disclosure. The cups-browsed issue could allow unauthorized network packets to be trusted, possibly leading to denial of service or other impacts. The remote command injection in libppd could allow execution of arbitrary commands via crafted PPD files. These vulnerabilities collectively pose a high security risk to affected systems.
Mitigation Recommendations
Red Hat has released updated cups-filters packages for Red Hat Enterprise Linux 9 and related variants to address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2024:7346 and the article at https://access.redhat.com/articles/11258 to remediate these issues. No additional mitigations are specified or required beyond applying the official update.
Red Hat Security Advisory: cups-filters security update
Description
The cups-filters package, formerly part of the core CUPS distribution and now maintained independently, has multiple security issues including a lack of sanitization in the cfGetPrinterAttributes API (CVE-2024-47076), a vulnerability in cups-browsed trusting any UDP packet on port 631, and a remote command injection vulnerability in libppd. These issues affect Red Hat Enterprise Linux 9 and related variants. Red Hat has issued a security advisory with updates to address these vulnerabilities.
Affected software
pkg:rpm/redhat/cups-filtersRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This Red Hat security advisory addresses multiple vulnerabilities in the cups-filters package and related components. The cfGetPrinterAttributes API in libcupsfilters does not sanitize returned IPP attributes (CVE-2024-47076), potentially allowing malicious data to be processed. Additionally, cups-browsed binds on UDP INADDR_ANY:631 and trusts packets from any source, and libppd in cups is vulnerable to remote command injection via attacker-controlled data in PPD files. These vulnerabilities affect Red Hat Enterprise Linux 9 and its Extended Update Support and Extended Life Cycle variants across multiple architectures. Red Hat has released updated packages to fix these issues as detailed in advisory RHSA-2024:7346.
Potential Impact
The vulnerabilities could allow an attacker to exploit unsanitized IPP attributes, potentially leading to unintended behavior or information disclosure. The cups-browsed issue could allow unauthorized network packets to be trusted, possibly leading to denial of service or other impacts. The remote command injection in libppd could allow execution of arbitrary commands via crafted PPD files. These vulnerabilities collectively pose a high security risk to affected systems.
Mitigation Recommendations
Red Hat has released updated cups-filters packages for Red Hat Enterprise Linux 9 and related variants to address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2024:7346 and the article at https://access.redhat.com/articles/11258 to remediate these issues. No additional mitigations are specified or required beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:7346
- Cve Count
- 4
- Additional Cves
- ["CVE-2024-47175","CVE-2024-47176","CVE-2024-47850"]
- Cvss Version
- null
Threat ID: 6a3da1ee4853345fc1831530
Added to database: 06/25/2026, 21:47:26 UTC
Last enriched: 06/25/2026, 22:42:31 UTC
Last updated: 07/02/2026, 20:51:14 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.