The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7506 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()

    * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP     attributes (CVE-2024-47076)

    * cups: libppd: remote command injection via attacker controlled data in PPD file ()

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5778 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5778-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     September 29, 2024                    https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : cups-filters     CVE ID         : CVE-2024-47076 CVE-2024-47176     Debian Bug     : 1082820 1082827

    Simone Margaritelli reported several vulnerabilities in cups-filters.
    Missing validation of IPP attributes returned from an IPP server and     multiple bugs in the cups-browsed component can result in the execution     of arbitrary commands without authentication when a print job is     started.

    For the stable distribution (bookworm), these problems have been fixed in     version 1.28.17-3+deb12u1.

    We recommend that you upgrade your cups-filters packages.

    For the detailed security status of cups-filters please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/cups-filters

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3905 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3905-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                    Thorsten Alteholz     September 29, 2024                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : cups-filters     Version        : 1.28.7-1+deb11u3     CVE ID         : CVE-2024-47076 CVE-2024-47176     Debian Bug     : 1082820 1082827


    Simone Margaritelli reported several vulnerabilities in cups-filters.
    Missing validation of IPP attributes returned from an IPP server and     multiple bugs in the cups-browsed component can result in the execution     of arbitrary commands without authentication when a print job is     started.


    For Debian 11 bullseye, these problems have been fixed in version     1.28.7-1+deb11u3.

    We recommend that you upgrade your cups-filters packages.

    For the detailed security status of cups-filters please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/cups-filters

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7461 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()

    * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP     attributes (CVE-2024-47076)

    * cups: libppd: remote command injection via attacker controlled data in PPD file ()

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7463 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()

    * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP     attributes (CVE-2024-47076)

    * cups: libppd: remote command injection via attacker controlled data in PPD file ()

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7504 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()

    * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP     attributes (CVE-2024-47076)

    * cups: libppd: remote command injection via attacker controlled data in PPD file ()

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:7463 advisory.

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()

    * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP     attributes (CVE-2024-47076)

    * cups: libppd: remote command injection via attacker controlled data in PPD file ()

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7043-1 advisory.

    Simone Margaritelli discovered that the cups-filters cups-browsed component could be used to create     arbitrary printers from outside the local network. In combination with issues in other printing     components, a remote attacker could possibly use this issue to connect to a system, created manipulated     PPD files, and execute arbitrary code when a printer is used. This update disables support for the legacy     CUPS printer discovery protocol. (CVE-2024-47176)

    Simone Margaritelli discovered that cups-filters incorrectly sanitized IPP data when creating PPD files. A     remote attacker could possibly use this issue to manipulate PPD files and execute arbitrary code when a     printer is used. (CVE-2024-47076)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-723 advisory.

    2024-11-13: CVE-2024-47850 was added to this advisory.

    CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the     filters of the former `cups-filters` package as library functions to be used for the data format     conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in     `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes     are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided     to the rest of the CUPS system. (CVE-2024-47076)

    CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing     functionality including, but not limited to, auto-discovering print services and shared printers. `cups-     browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the     `Get-Printer-Attributes` IPP request to an attacker controlled URL.

    Due to the service binding to `*:631 ( INADDR_ANY )`, multiple bugs in `cups-browsed` can be exploited in     sequence to introduce a malicious printer to the system. This chain of exploits ultimately enables an     attacker to execute arbitrary commands remotely on the target machine without authentication when a print     job is started. This poses a significant security risk over the network. Notably, this vulnerability is     particularly concerning as it can be exploited from the public internet, potentially exposing a vast     number of systems to remote attacks if their CUPS services are enabled. (CVE-2024-47176)

    CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in     response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than     CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS     amplification attacks.) (CVE-2024-47850)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0536 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2024-47076:
    CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the     filters of the former cups-filters package as library functions to be used for the data format conversion     tasks needed in Printer Applications. The cfGetPrinterAttributes5 function in libcupsfilters does not     sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to     generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS     system.

    CVE-2024-47175:
    CUPS is a standards-based, open-source printing system, and libppd can be used for legacy PPD file     support. The libppd function ppdCreatePPDFromIPP2 does not sanitize IPP attributes when creating the PPD     buffer. When used in combination with other functions such as cfGetPrinterAttributes5, can result in user     controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit     chain leading to remote code execution (RCE), as described in CVE-2024-47176.

    CVE-2024-47176:
    CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing     functionality including, but not limited to, auto-discovering print services and shared printers. cups-     browsed binds to INADDR_ANY:631, causing it to trust any packet from any source, and can cause the Get-     Printer-Attributes IPP request to an attacker controlled URL.

    Due to the service binding to *:631 ( INADDR_ANY ), multiple bugs in cups-browsed can be exploited in     sequence to introduce a malicious printer to the system. This chain of exploits ultimately enables an     attacker to execute arbitrary commands remotely on the target machine without authentication when a print     job is started. This poses a significant security risk over the network. Notably, this vulnerability is     particularly concerning as it can be exploited from the public internet, potentially exposing a vast     number of systems to remote attacks if their CUPS services are enabled.

    CVE-2024-47850:
    CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in     response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than     CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS     amplification attacks.)

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0529 advisory.

    Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:

    CVE-2024-47076:
    CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the     filters of the former cups-filters package as library functions to be used for the data format conversion     tasks needed in Printer Applications. The cfGetPrinterAttributes5 function in libcupsfilters does not     sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to     generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS     system.

    CVE-2024-47175:
    CUPS is a standards-based, open-source printing system, and libppd can be used for legacy PPD file     support. The libppd function ppdCreatePPDFromIPP2 does not sanitize IPP attributes when creating the PPD     buffer. When used in combination with other functions such as cfGetPrinterAttributes5, can result in user     controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit     chain leading to remote code execution (RCE), as described in CVE-2024-47176.

    CVE-2024-47176:
    CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing     functionality including, but not limited to, auto-discovering print services and shared printers. cups-     browsed binds to INADDR_ANY:631, causing it to trust any packet from any source, and can cause the Get-     Printer-Attributes IPP request to an attacker controlled URL.

    Due to the service binding to *:631 ( INADDR_ANY ), multiple bugs in cups-browsed can be exploited in     sequence to introduce a malicious printer to the system. This chain of exploits ultimately enables an     attacker to execute arbitrary commands remotely on the target machine without authentication when a print     job is started. This poses a significant security risk over the network. Notably, this vulnerability is     particularly concerning as it can be exploited from the public internet, potentially exposing a vast     number of systems to remote attacks if their CUPS services are enabled.

    CVE-2024-47850:
    CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in     response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than     CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS     amplification attacks.)

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux host has a package installed that is affected by the vulnerabilities as referenced in the RHSB-2024:002 advisory.

  - CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the     filters of the former `cups-filters` package as library functions to be used for the data format conversion     tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not     sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to     generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS     system. (CVE-2024-47076)

  - CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file     support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the     PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in     user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an     exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176. (CVE-2024-47175)

  - CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing     functionality including, but not limited to, auto-discovering print services and shared printers.
    `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the     `Get-Printer-Attributes` IPP request to an attacker controlled URL. Due to the service binding to `*:631     ( INADDR_ANY )`, multiple bugs in `cups-browsed` can be exploited in sequence to introduce a malicious     printer to the system. This chain of exploits ultimately enables an attacker to execute arbitrary commands     remotely on the target machine without authentication when a print job is started. This poses a significant     security risk over the network. Notably, this vulnerability is particularly concerning as it can be     exploited from the public internet, potentially exposing a vast number of systems to remote attacks if     their CUPS services are enabled. (CVE-2024-47176)

  - CUPS is a standards-based, open-source printing system, and cups-filters provides backends, filters, and     other software for CUPS 2.x to use on non-Mac OS systems. Any value passed to `FoomaticRIPCommandLine` via     a PPD file will be executed as a user controlled command. When combined with other logic bugs as described     in CVE_2024-47176, this can lead to remote command execution. (CVE-2024-47177)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
208031	RHEL 9 : cups-filters (RHSA-2024:7506)	Nessus	Red Hat Local Security Checks	2024/10/2	2025/10/9	critical
207905	Debian dsa-5778 : cups-browsed - security update	Nessus	Debian Local Security Checks	2024/9/29	2025/10/9	high
207908	Debian dla-3905 : cups-browsed - security update	Nessus	Debian Local Security Checks	2024/9/29	2025/10/9	high
208001	RHEL 8 : cups-filters (RHSA-2024:7461)	Nessus	Red Hat Local Security Checks	2024/10/1	2025/10/9	critical
208003	RHEL 8 : cups-filters (RHSA-2024:7463)	Nessus	Red Hat Local Security Checks	2024/10/1	2025/10/9	critical
208032	RHEL 8 : cups-filters (RHSA-2024:7504)	Nessus	Red Hat Local Security Checks	2024/10/2	2025/10/9	critical
209704	RockyLinux 8 : cups-filters (RLSA-2024:7463)	Nessus	Rocky Linux Local Security Checks	2024/10/25	2025/10/9	critical
207840	Ubuntu 20.04 LTS / 22.04 LTS : cups-filters vulnerabilities (USN-7043-1)	Nessus	Ubuntu Local Security Checks	2024/9/27	2025/10/9	high
208963	Amazon Linux 2023 : cups-filters, cups-filters-devel, cups-filters-libs (ALAS2023-2024-723)	Nessus	Amazon Linux Local Security Checks	2024/10/14	2025/10/9	high
239582	TencentOS Server 3: cups-filters (TSSA-2024:0536)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	critical
239746	TencentOS Server 2: cups-filters (TSSA-2024:0529)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	critical
207865	RHEL OpenPrinting cups-filters (RHSB-2024:002)	Nessus	Red Hat Local Security Checks	2024/9/27	2026/8/4	critical

检测

插件搜索

critical

high

high

critical

critical

critical

critical

high

high

critical

critical

critical