The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7623 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()

    * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP     attributes (CVE-2024-47076)

    * cups: libppd: remote command injection via attacker controlled data in PPD file ()

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7043-4 advisory.

    USN-7043-1 fixed vulnerabilities in cups-filters. This update improves the fix for CVE-2024-47176 by     removing support for the legacy CUPS printer discovery protocol entirely.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0225 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-47076:
    CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the     filters of the former `cups-filters` package as library functions to be used for the data format     conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in     `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes     are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided     to the rest of the CUPS system.

    CVE-2024-47175:
    CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file     support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the     PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in     user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an     exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.

    CVE-2024-47176:
    CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing     functionality including, but not limited to, auto-discovering print services and shared printers. `cups-     browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the     `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other     vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute     arbitrary commands remotely on the target machine without authentication when a malicious printer is     printed to.

    CVE-2024-47850:
    CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in     response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than     CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS     amplification attacks.)

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-cf6ab63871 advisory.

    Fix for remote vulnerabilities against OpenPrinting cups-filters

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7553 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source     (CVE-2024-47176)

    * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP     attributes (CVE-2024-47076)

    * cups: libppd: remote command injection via attacker controlled data in PPD file (CVE-2024-47175)

    * cups-browsed: cups-filters: cups-browsed vulnerable to DDoS amplification attack (CVE-2024-47850)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8862:03 advisory.

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()
      * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned     IPP attributes (CVE-2024-47076)
      * cups: libppd: remote command injection via attacker controlled data in PPD file ()

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5778 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5778-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     September 29, 2024                    https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : cups-filters     CVE ID         : CVE-2024-47076 CVE-2024-47176     Debian Bug     : 1082820 1082827

    Simone Margaritelli reported several vulnerabilities in cups-filters.
    Missing validation of IPP attributes returned from an IPP server and     multiple bugs in the cups-browsed component can result in the execution     of arbitrary commands without authentication when a print job is     started.

    For the stable distribution (bookworm), these problems have been fixed in     version 1.28.17-3+deb12u1.

    We recommend that you upgrade your cups-filters packages.

    For the detailed security status of cups-filters please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/cups-filters

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3905 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3905-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                    Thorsten Alteholz     September 29, 2024                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : cups-filters     Version        : 1.28.7-1+deb11u3     CVE ID         : CVE-2024-47076 CVE-2024-47176     Debian Bug     : 1082820 1082827


    Simone Margaritelli reported several vulnerabilities in cups-filters.
    Missing validation of IPP attributes returned from an IPP server and     multiple bugs in the cups-browsed component can result in the execution     of arbitrary commands without authentication when a print job is     started.


    For Debian 11 bullseye, these problems have been fixed in version     1.28.7-1+deb11u3.

    We recommend that you upgrade your cups-filters packages.

    For the detailed security status of cups-filters please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/cups-filters

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7506 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()

    * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP     attributes (CVE-2024-47076)

    * cups: libppd: remote command injection via attacker controlled data in PPD file ()

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7346 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()

    * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP     attributes (CVE-2024-47076)

    * cups: libppd: remote command injection via attacker controlled data in PPD file ()

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7462 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()

    * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP     attributes (CVE-2024-47076)

    * cups: libppd: remote command injection via attacker controlled data in PPD file ()

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
208069	RHEL 8 : cups-filters (RHSA-2024:7623)	Nessus	Red Hat Local Security Checks	2024/10/3	2025/10/9	critical
208473	Ubuntu 20.04 LTS / 22.04 LTS : cups-filters vulnerabilities (USN-7043-4)	Nessus	Ubuntu Local Security Checks	2024/10/9	2025/10/9	high
236324	Alibaba Cloud Linux 3 : 0225: cups-filters (ALINUX3-SA-2024:0225)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
207880	Fedora 39 : cups / cups-browsed / libcupsfilters / libppd (2024-cf6ab63871)	Nessus	Fedora Local Security Checks	2024/9/28	2025/10/9	critical
208059	RHEL 7 : cups-filters (RHSA-2024:7553)	Nessus	Red Hat Local Security Checks	2024/10/2	2025/10/9	critical
293525	MiracleLinux 9 : cups-filters-1.28.7-17.el9_4 (AXSA:2024-8862:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/2/4	critical
207905	Debian dsa-5778 : cups-browsed - security update	Nessus	Debian Local Security Checks	2024/9/29	2025/10/9	high
207908	Debian dla-3905 : cups-browsed - security update	Nessus	Debian Local Security Checks	2024/9/29	2025/10/9	high
208031	RHEL 9 : cups-filters (RHSA-2024:7506)	Nessus	Red Hat Local Security Checks	2024/10/2	2025/10/9	critical
207876	RHEL 9 : cups-filters (RHSA-2024:7346)	Nessus	Red Hat Local Security Checks	2024/9/27	2025/10/9	critical
208002	RHEL 8 : cups-filters (RHSA-2024:7462)	Nessus	Red Hat Local Security Checks	2024/10/1	2025/10/9	critical

检测

插件搜索

critical

high

high

critical

critical

critical

high

high

critical

critical

critical