MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2024-47176

CVSS 5.3v3.1pub. 2024-09-26upd. 2025-11-04

CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

  • Openprinting Cups Browsed

    APP
    Openprinting
    2.0.1
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2023-34095CRITICAL9.8ten sam vendor

cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends (CPDB) project. In v...

CVE-2025-58060HIGH8.0ten sam vendor

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versio...

CVE-2024-47076HIGH8.6ten sam vendor

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters ...

CVE-2024-47175HIGH8.6ten sam vendor

CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. ...

CVE-2023-4504HIGH7.0ten sam vendor

Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libp...