CVE-2024-47076: openprinting libcupsfilters Improper Input Validation
Vulnerability summary
CVE-2024-47076 is a high (CVSS 8.6) Improper Input Validation vulnerability in openprinting libcupsfilters. EPSS estimates a 79.90% chance of exploitation in the next 30 days, higher than 99.6% of scored vulnerabilities. 3 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 18 · Duplicates 1 · Related 5Timeline
- 26-09-2024PublishedVulnerability first disclosed.
- 03-11-2025Last modifiedVulnerability information updated.
Description
CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated8.6HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
- OSV · DebianEcosystem advisory · calculated8.6HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
- NVDNIST8.6HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
EPSS trend
Probability
79.90%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
+2.25 pp
From 77.64% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundLibcupsfilters
Maturity: poc
Exploit Reference (evilsocket.net)
Maturity: unknown
CUPS IPP Attributes LAN Remote Code Execution
exploit/multi/misc/cups_ipp_remote_code_execution
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Debian2 products
- cups-filters< 1.28.17-3+deb12u1 | < 1.28.17-5
- libcupsfilters< 2.0.0-3
Ubuntu2 products
- cups-filters< 1.27.4-1ubuntu0.4 | < 1.28.15-0ubuntu1.4
- libcupsfilters< 2.0.0-0ubuntu7.1
Openprinting1 product
- libcupsfilters≤ 2.1b1 | ≤ 2.0.0 | 2.1:beta1
3 vendors · 5 products
References
16 links- github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5X Refsource CONFIRMREPORTExploitVendor Advisory
- github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8X Refsource MISCNot Applicable
- github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47X Refsource MISCNot Applicable
- github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6X Refsource MISCNot Applicable
- www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-IX Refsource MISCExploitThird Party Advisory
