The cups-filters package, formerly part of the core CUPS distribution and now maintained independently, contains several security flaws. Notably, CVE-2024-47076 involves the libcupsfilters cfGetPrinterAttributes API failing to sanitize returned IPP attributes, potentially allowing malicious data to be processed. Additional vulnerabilities include cups-browsed binding on UDP INADDR_ANY:631 and trusting any packet source, and a remote command injection vulnerability in cups libppd via attacker-controlled PPD file data. These vulnerabilities affect Red Hat Enterprise Linux 9 and related variants. Red Hat has released patches to address these issues as detailed in advisory RHSA-2024:7346.

The vulnerabilities could allow attackers to exploit the printing system to execute unauthorized commands or inject malicious data, potentially compromising system integrity or causing denial of service. The lack of sanitization in the cfGetPrinterAttributes API and the remote command injection in libppd represent significant risks. However, no known exploits in the wild have been reported at this time.

Red Hat has released official patches for these vulnerabilities in the cups-filters package as part of Red Hat Enterprise Linux 9 updates. Users should apply the updates provided in advisory RHSA-2024:7346 promptly to remediate these issues. Detailed update instructions are available at https://access.redhat.com/articles/11258. No additional mitigations are indicated by the vendor advisory.