9.8

CVE-2024-47175: debian debian_linux Improper Input Validation

CVSS: 9.8v3.1CriticalModified
AliasesALPINE-CVE-2024-47175SUSE-SU-2025:03225-1RHSA-2024:9470
Published 26-09-2024Last modified 03-11-2025
Open JSON

Vulnerability summary

CVE-2024-47175 is a critical (CVSS 9.8) Improper Input Validation vulnerability in debian debian_linux. EPSS estimates a 63.61% chance of exploitation in the next 30 days, higher than 99.2% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.1 (NVD)
EPSS score
63.61%
0%100%
Critical · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits3github, reference, metasploit

Advisory lineage

Upstream 0 · Downstream 14 · Related 3
MGASA-2024-0327OPENSUSE-SU-2025:15563-1OPENSUSE-SU-2026:21850-1RHSA-2024:7346RHSA-2024:7461RHSA-2024:7462

Timeline

  1. 26-09-2024
    PublishedVulnerability first disclosed.
  2. 03-11-2025
    Last modifiedVulnerability information updated.

Description

CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.

CVSS metrics

6 scores · 6 sources · 1 version

EPSS trend

Probability

63.61%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 63.61% on 18-09-2026

18-09-202618-10-2026
EPSS score
63.61%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found
  • githubUnverified

    Libppd

    Maturity: poc

  • referenceUnverified

    Exploit Reference (evilsocket.net)

    Maturity: unknown

  • MetasploitMetasploitremoteUnverified

    CUPS IPP Attributes LAN Remote Code Execution

    exploit/multi/misc/cups_ipp_remote_code_execution

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Suse16 products
  • cups-filters&distro=SUSE Enterprise Storage 7.1< 1.25.0-150200.3.22.1
  • cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 1.25.0-150200.3.22.1
  • cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 1.25.0-150200.3.22.1
  • cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 1.25.0-150200.3.22.1
  • cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 1.25.0-150200.3.22.1
Redhat15 products
  • cups< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10
  • cups-client< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10
  • cups-client-debuginfo< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10
  • cups-debuginfo< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10
  • cups-debugsource< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10
Debian2 products
  • cups< 2.4.10-2 | < 2.4.2-3+deb12u8 | < 2.3.3op2-3+deb11u9
  • debian_linuxEOL11.0
Ubuntu2 products
  • cups< 2.3.1-9ubuntu1.9 | < 2.4.1op1-1ubuntu4.11 | < 2.4.7-1.2ubuntu7.3 | < 2.2.7-1ubuntu2.10+esm6 | < 2.1.3-4ubuntu0.11+esm8
  • libppd< 2:2.0.0-0ubuntu4.1
Alpine1 product
  • cups< 2.4.9-r1 | < 2.4.10-r1
Openprinting1 product
  • libppd≤ 2.1b1 | ≤ 2.0.0 | 2.1:beta1*
Opensuse1 product
  • cups-filters&distro=openSUSE Leap 15.6< 1.25.0-150200.3.22.1

7 vendors · 38 products

References

34 links
Show all 34 references