Threat Intelligence Database

A security update for the cups-filters package in Red Hat Enterprise Linux 9.2 addresses multiple vulnerabilities including CVE-2024-47076, where the cfGetPrinterAttributes API does not sanitize returned IPP attributes. Other issues fixed include a cups-browsed UDP binding vulnerability and a remote command injection in the cups libppd component. These vulnerabilities could allow attackers to exploit unsanitized inputs or trust packets from any source. The update is rated as Important by Red Hat Product Security and affects several Red Hat Enterprise Linux 9.2 variants and architectures.

A security update for the cups-filters package in Red Hat Enterprise Linux 8 addresses multiple vulnerabilities, including CVE-2024-47076 where the cfGetPrinterAttributes API does not sanitize returned IPP attributes. Other issues fixed include cups-browsed binding on UDP INADDR_ANY:631 trusting any packet and a remote command injection vulnerability in cups libppd. These vulnerabilities could lead to security risks if exploited. The update is rated as Important by Red Hat and patches are available for affected versions.

A security update for the cups-filters package in Red Hat Enterprise Linux 9 addresses multiple vulnerabilities including an unsanitized IPP attribute issue in the cfGetPrinterAttributes API (CVE-2024-47076), a cups-browsed UDP binding issue, and a remote command injection vulnerability in the cups libppd component. These issues could allow attackers to exploit the printing system components. The update is rated as important by Red Hat and patches are available for affected versions.