{"schemaVersion":3,"id":"CVE-2023-24805","aliases":["MGASA-2023-0189","SUSE-SU-2023:2233-1","RHSA-2023:3423","RHSA-2023:3424","RHSA-2023:3425","RHSA-2023:3426","RHSA-2023:3427","RHSA-2023:3428","RHSA-2023:3429","UBUNTU-CVE-2023-24805","USN-6083-1","USN-6083-2","DEBIAN-CVE-2023-24805","DLA-3430-1","DSA-5407-1","SUSE-SU-2023:2233-2","openSUSE-SU-2024:12939-1"],"status":"published","duplicateOf":null,"title":null,"description":"cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. If you use the Backend Error Handler (beh) to create an accessible network printer, this security vulnerability can cause remote code execution. `beh.c` contains the line `retval = system(cmdline) >> 8;` which calls the `system` command with the operand `cmdline`. `cmdline` contains multiple user controlled, unsanitized values. As a result an attacker with network access to the hosted print server can exploit this vulnerability to inject system commands which are executed in the context of the running server. This issue has been addressed in commit `8f2740357` and is expected to be bundled in the next release. Users are advised to upgrade when possible and to restrict access to network printers in the meantime.","dates":{"published":"2023-05-17T17:33:41.714Z","modified":"2025-02-13T16:44:26.990Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.03697,"percentile":0.89584,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.03697},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03697,"percentile":0.89584}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03697,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03697,"percentile":0.89584}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_OPENPRINTING_CUPS-FILTERS","name":"Cups Filters","source":"github","url":"https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-gpxc-v2m8-fr3x","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","description":"The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/78.html"}],"affected":[{"vendor":"debian","product":"cups-filters","name":"cups-filters","label":"cups-filters","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/cups-filters","purlType":"deb","versions":[{"text":"< 1.28.17-3","noFixRecorded":false,"fixedIn":null},{"text":"< 1.28.7-1+deb11u2","noFixRecorded":false,"fixedIn":null},{"text":"< 1.21.6-5+deb10u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.28.17-3 | < 1.28.7-1+deb11u2 | < 1.21.6-5+deb10u1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"cups-filters","name":"cups-filters","label":"cups-filters","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/cups-filters","purlType":"deb","versions":[{"text":"< 1.20.2-0ubuntu3.3","noFixRecorded":false,"fixedIn":null},{"text":"< 1.27.4-1ubuntu0.2","noFixRecorded":false,"fixedIn":null},{"text":"< 1.28.15-0ubuntu1.2","noFixRecorded":false,"fixedIn":null},{"text":"< 1.8.3-2ubuntu3.5+esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.2-0ubuntu3.3 | < 1.27.4-1ubuntu0.2 | < 1.28.15-0ubuntu1.2 | < 1.8.3-2ubuntu3.5+esm1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10.0","noFixRecorded":false,"fixedIn":null},{"text":"11.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"10.0 | 11.0","eol":{"isEol":true,"eolDate":"2024-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"10","label":"10 (Buster)","eolFrom":"2024-06-30T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"10.13"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"37","noFixRecorded":false,"fixedIn":null},{"text":"38","noFixRecorded":false,"fixedIn":null}],"versionsText":"37 | 38","eol":{"isEol":true,"eolDate":"2023-12-05T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"37","label":"37","eolFrom":"2023-12-05T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"linuxfoundation","product":"cups-filters","name":"cups-filters","label":"cups-filters","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.0","noFixRecorded":false,"fixedIn":null},{"text":"2.0:beta1","noFixRecorded":false,"fixedIn":null},{"text":"2.0:beta2","noFixRecorded":false,"fixedIn":null},{"text":"2.0:beta3","noFixRecorded":false,"fixedIn":null},{"text":"2.0:rc1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0 | 2.0:beta1 | 2.0:beta2 | 2.0:beta3 | 2.0:rc1","eol":null,"hubHref":"/vendor/linuxfoundation/cups-filters"},{"vendor":"mageia","product":"cups-filters","name":"cups-filters","label":"cups-filters","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/cups-filters","purlType":"rpm","versions":[{"text":"< 1.28.7-1.1.mga8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.28.7-1.1.mga8","eol":null,"hubHref":null},{"vendor":"openprinting","product":"cups-filters","name":"cups-filters","label":"cups-filters","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.0rc1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.0rc1","eol":null,"hubHref":"/vendor/openprinting/cups-filters"},{"vendor":"opensuse","product":"cups-filters&distro=openSUSE Leap 15.4","name":"cups-filters","label":"cups-filters&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cups-filters&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cups-filters&distro=openSUSE Leap 15.5","name":"cups-filters","label":"cups-filters&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cups-filters&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cups-filters&distro=openSUSE Tumbleweed","name":"cups-filters","label":"cups-filters&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cups-filters&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 1.28.15-3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.28.15-3.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-filters","name":"cups-filters","label":"cups-filters","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-filters","purlType":"rpm","versions":[{"text":"< 0:1.28.7-11.el9_2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.28.7-10.el9_0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-29.el8_8.2","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-27.el8_6.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-24.el8_4.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-19.el8_2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-18.el8_1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.28.7-11.el9_2.1 | < 0:1.28.7-10.el9_0.1 | < 0:1.20.0-29.el8_8.2 | < 0:1.20.0-27.el8_6.1 | < 0:1.20.0-24.el8_4.1 | < 0:1.20.0-19.el8_2.1 | < 0:1.20.0-18.el8_1.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-filters-debuginfo","name":"cups-filters-debuginfo","label":"cups-filters-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-filters-debuginfo","purlType":"rpm","versions":[{"text":"< 0:1.28.7-11.el9_2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.28.7-10.el9_0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-29.el8_8.2","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-27.el8_6.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-24.el8_4.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-19.el8_2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-18.el8_1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.28.7-11.el9_2.1 | < 0:1.28.7-10.el9_0.1 | < 0:1.20.0-29.el8_8.2 | < 0:1.20.0-27.el8_6.1 | < 0:1.20.0-24.el8_4.1 | < 0:1.20.0-19.el8_2.1 | < 0:1.20.0-18.el8_1.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-filters-debugsource","name":"cups-filters-debugsource","label":"cups-filters-debugsource","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-filters-debugsource","purlType":"rpm","versions":[{"text":"< 0:1.28.7-11.el9_2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.28.7-10.el9_0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-29.el8_8.2","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-27.el8_6.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-24.el8_4.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-19.el8_2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-18.el8_1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.28.7-11.el9_2.1 | < 0:1.28.7-10.el9_0.1 | < 0:1.20.0-29.el8_8.2 | < 0:1.20.0-27.el8_6.1 | < 0:1.20.0-24.el8_4.1 | < 0:1.20.0-19.el8_2.1 | < 0:1.20.0-18.el8_1.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-filters-devel","name":"cups-filters-devel","label":"cups-filters-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-filters-devel","purlType":"rpm","versions":[{"text":"< 0:1.28.7-11.el9_2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.28.7-10.el9_0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-29.el8_8.2","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-27.el8_6.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-24.el8_4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.28.7-11.el9_2.1 | < 0:1.28.7-10.el9_0.1 | < 0:1.20.0-29.el8_8.2 | < 0:1.20.0-27.el8_6.1 | < 0:1.20.0-24.el8_4.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-filters-libs","name":"cups-filters-libs","label":"cups-filters-libs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-filters-libs","purlType":"rpm","versions":[{"text":"< 0:1.28.7-11.el9_2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.28.7-10.el9_0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-29.el8_8.2","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-27.el8_6.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-24.el8_4.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-19.el8_2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-18.el8_1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.28.7-11.el9_2.1 | < 0:1.28.7-10.el9_0.1 | < 0:1.20.0-29.el8_8.2 | < 0:1.20.0-27.el8_6.1 | < 0:1.20.0-24.el8_4.1 | < 0:1.20.0-19.el8_2.1 | < 0:1.20.0-18.el8_1.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-filters-libs-debuginfo","name":"cups-filters-libs-debuginfo","label":"cups-filters-libs-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-filters-libs-debuginfo","purlType":"rpm","versions":[{"text":"< 0:1.28.7-11.el9_2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.28.7-10.el9_0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-29.el8_8.2","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-27.el8_6.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-24.el8_4.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-19.el8_2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.20.0-18.el8_1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.28.7-11.el9_2.1 | < 0:1.28.7-10.el9_0.1 | < 0:1.20.0-29.el8_8.2 | < 0:1.20.0-27.el8_6.1 | < 0:1.20.0-24.el8_4.1 | < 0:1.20.0-19.el8_2.1 | < 0:1.20.0-18.el8_1.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Enterprise Storage 7","name":"cups-filters","label":"cups-filters&distro=SUSE Enterprise Storage 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Enterprise Storage 7","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Enterprise Storage 7.1","name":"cups-filters","label":"cups-filters&distro=SUSE Enterprise Storage 7.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Enterprise Storage 7.1","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Real Time 15 SP3","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Real Time 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Real Time 15 SP3","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Manager Proxy 4.2","name":"cups-filters","label":"cups-filters&distro=SUSE Manager Proxy 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Manager Proxy 4.2","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Manager Server 4.2","name":"cups-filters","label":"cups-filters&distro=SUSE Manager Server 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Manager Server 4.2","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.6.1","eol":null,"hubHref":null}],"affectedCount":30,"eol":{"hasEol":true,"count":2},"references":[{"url":"https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-gpxc-v2m8-fr3x","label":"github.com/OpenPrinting/cups-filters/security/advisories/GHSA-gpxc-v2m8-fr3x","hostname":"github.com","tags":["X Refsource CONFIRM","ARTICLE","Exploit","Vendor Advisory"]},{"url":"https://github.com/OpenPrinting/cups-filters/commit/8f274035756c04efeb77eb654e9d4c4447287d65","label":"github.com/OpenPrinting/cups-filters/commit/8f274035756c04efeb77eb654e9d4c4447287d65","hostname":"github.com","tags":["X Refsource MISC","Patch"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YNCGL2ZTAS2GFF23QFT55UFWIDMI4ZJK/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Mailing List","Release Notes"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00021.html","label":"lists.debian.org/debian-lts-announce/2023/05/msg00021.html","hostname":"lists.debian.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.debian.org/security/2023/dsa-5407","label":"www.debian.org/security/2023/dsa-5407","hostname":"www.debian.org","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KL2SJMZQ5T5JIH3PMQ2CGCY5TUUE255Y/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Mailing List","Release Notes"]},{"url":"https://security.gentoo.org/glsa/202401-06","label":"security.gentoo.org/glsa/202401-06","hostname":"security.gentoo.org","tags":[]},{"url":"https://advisories.mageia.org/MGASA-2023-0189.html","label":"advisories.mageia.org/MGASA-2023-0189.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31939","label":"bugs.mageia.org/show_bug.cgi?id=31939","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.openwall.com/lists/oss-security/2023/05/17/5","label":"www.openwall.com/lists/oss-security/2023/05/17/5","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://ubuntu.com/security/notices/USN-6083-1","label":"ubuntu.com/security/notices/USN-6083-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2023-May/014921.html","label":"lists.suse.com/pipermail/sle-security-updates/2023-May/014921.html","hostname":"lists.suse.com","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/YNCGL2ZTAS2GFF23QFT55UFWIDMI4ZJK/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232233-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20232233-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1211340","label":"bugzilla.suse.com/1211340","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2023-24805","label":"www.suse.com/security/cve/CVE-2023-24805","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3423","label":"access.redhat.com/errata/RHSA-2023:3423","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2203051","label":"bugzilla.redhat.com/show_bug.cgi?id=2203051","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3423.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3423.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24805","label":"access.redhat.com/security/cve/CVE-2023-24805","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24805","label":"www.cve.org/CVERecord?id=CVE-2023-24805","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24805","label":"nvd.nist.gov/vuln/detail/CVE-2023-24805","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3424","label":"access.redhat.com/errata/RHSA-2023:3424","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3424.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3424.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3425","label":"access.redhat.com/errata/RHSA-2023:3425","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3425.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3425.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3426","label":"access.redhat.com/errata/RHSA-2023:3426","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3426.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3426.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3427","label":"access.redhat.com/errata/RHSA-2023:3427","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3427.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3427.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3428","label":"access.redhat.com/errata/RHSA-2023:3428","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3428.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3428.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3429","label":"access.redhat.com/errata/RHSA-2023:3429","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3429.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3429.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-24805","label":"ubuntu.com/security/CVE-2023-24805","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-6083-2","label":"ubuntu.com/security/notices/USN-6083-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-24805","label":"security-tracker.debian.org/tracker/CVE-2023-24805","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232233-2/","label":"www.suse.com/support/update/announcement/2023/suse-su-20232233-2/","hostname":"www.suse.com","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["SUSE-SU-2023:2287-1"],"duplicates":[],"related":["SUSE-SU-2023:2287-1"]},"timeline":[{"kind":"published","date":"2023-05-17T17:33:41.714Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-02-13T16:44:26.990Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":46,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T11:46:31.316Z","stale":false,"partial":false}}