Threats Tagged 'cve-2024-47175'

The cups-filters package, formerly part of the core CUPS distribution and now maintained independently, has multiple security issues including a lack of sanitization in the cfGetPrinterAttributes API (CVE-2024-47076), a vulnerability in cups-browsed trusting any UDP packet on port 631, and a remote command injection vulnerability in libppd. These issues affect Red Hat Enterprise Linux 9 and related variants. Red Hat has issued a security advisory with updates to address these vulnerabilities.

A security update for the cups-filters package addresses multiple vulnerabilities including a lack of sanitization in the cfGetPrinterAttributes API (CVE-2024-47076), an issue with cups-browsed binding to UDP INADDR_ANY:631 trusting any packet, and a remote command injection vulnerability in cups libppd via attacker-controlled PPD file data. These vulnerabilities affect Red Hat Enterprise Linux 8.8 Extended Update Support and related variants. The update is rated as Important by Red Hat Product Security. No CVSS score is provided in the advisory.

A security advisory from Red Hat addresses multiple vulnerabilities in the cups-filters package, which contains components formerly part of the core CUPS printing system. Notably, CVE-2024-47076 involves the libcupsfilters `cfGetPrinterAttributes` API failing to sanitize returned IPP attributes. Other issues include cups-browsed trusting any UDP packet on port 631 and a remote command injection vulnerability in cups libppd via attacker-controlled PPD file data. Red Hat has released an important security update for Red Hat Enterprise Linux 8 to address these issues.

A security update for the cups-filters package addresses multiple vulnerabilities including an issue in the cfGetPrinterAttributes API that does not sanitize returned IPP attributes (CVE-2024-47076), a cups-browsed UDP binding trust issue, and a remote command injection vulnerability in cups libppd. These vulnerabilities affect Red Hat Enterprise Linux 9.2 Extended Update Support and related variants. The update is rated as Important by Red Hat Product Security and fixes these issues in version 1.28.7-11.el9_2.2 of cups-filters.

A security update for the cups-filters package addresses multiple vulnerabilities including an issue in the cfGetPrinterAttributes API that does not sanitize returned IPP attributes (CVE-2024-47076), a cups-browsed component binding on UDP INADDR_ANY:631 trusting any packet, and a remote command injection vulnerability in cups libppd via attacker-controlled PPD file data. These vulnerabilities affect Red Hat Enterprise Linux 7.7 Advanced Update Support. The update is rated as Important by Red Hat Product Security.

Multiple security vulnerabilities have been identified in the cups-filters package, which contains components formerly part of the core CUPS printing system. These include a lack of sanitization in the cfGetPrinterAttributes API (CVE-2024-47076), remote command injection via PPD files (CVE-2024-47175), insecure binding of cups-browsed on UDP port 631 (CVE-2024-47176), and a DDoS amplification vulnerability in cups-browsed (CVE-2024-47850). Red Hat has issued an important security update addressing these issues for Red Hat Enterprise Linux 7 Extended Lifecycle Support. The update mitigates these vulnerabilities by applying patches to the affected components. Users of the affected Red Hat Enterprise Linux 7 Extended Lifecycle Support versions should apply the update as recommended by Red Hat.

A low severity vulnerability (CVE-2024-47175) in the Common UNIX Printing System (CUPS) allows remote command injection via attacker-controlled data in PPD files. This issue affects Red Hat Enterprise Linux 8 and related variants. Red Hat has released an update to address this vulnerability.