{"schemaVersion":3,"id":"CVE-2024-47175","aliases":["ALPINE-CVE-2024-47175","SUSE-SU-2025:03225-1","RHSA-2024:9470","RHSA-2025:0083","UBUNTU-CVE-2024-47175","USN-7041-1","USN-7041-2","USN-7041-3","USN-7045-1","DEBIAN-CVE-2024-47175","DLA-3904-1","DSA-5779-1"],"status":"published","duplicateOf":null,"title":null,"description":"CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.","dates":{"published":"2024-09-26T21:18:25.265Z","modified":"2025-11-03T22:20:02.661Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":7.7,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","exploitability":5.6,"impact":9.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.63607,"percentile":0.99211,"severity":"critical","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.63607},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.63607,"percentile":0.99211}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.63607,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.63607,"percentile":0.99211}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_OPENPRINTING_LIBPPD","name":"Libppd","source":"github","url":"https://github.com/OpenPrinting/libppd/security/advisories/GHSA-4f65-6ph5-qwh6","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_4912EC65E490798B","name":"Exploit Reference (evilsocket.net)","source":"reference","url":"https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"MSF_EXPLOIT_MULTI_MISC_CUPS_IPP_REMOTE_CODE_EXECUTION","name":"CUPS IPP Attributes LAN Remote Code Execution","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/multi/misc/cups_ipp_remote_code_execution.rb","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/multi/misc/cups_ipp_remote_code_execution","rank":"300","rankName":"normal","postAuth":false,"check":false,"stability":["crash-safe"],"sideEffects":["ioc-in-logs","artifacts-on-disk"],"reliability":["event-dependent"]}}],"exploitCount":3,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"alpine","product":"cups","name":"cups","label":"cups","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/cups","purlType":"apk","versions":[{"text":"< 2.4.9-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.9-r1 | < 2.4.10-r1","eol":null,"hubHref":null},{"vendor":"debian","product":"cups","name":"cups","label":"cups","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/cups","purlType":"deb","versions":[{"text":"< 2.4.10-2","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.2-3+deb12u8","noFixRecorded":false,"fixedIn":null},{"text":"< 2.3.3op2-3+deb11u9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.10-2 | < 2.4.2-3+deb12u8 | < 2.3.3op2-3+deb11u9","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"cups","name":"cups","label":"cups","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/cups","purlType":"deb","versions":[{"text":"< 2.3.1-9ubuntu1.9","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.1op1-1ubuntu4.11","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.7-1.2ubuntu7.3","noFixRecorded":false,"fixedIn":null},{"text":"< 2.2.7-1ubuntu2.10+esm6","noFixRecorded":false,"fixedIn":null},{"text":"< 2.1.3-4ubuntu0.11+esm8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.1-9ubuntu1.9 | < 2.4.1op1-1ubuntu4.11 | < 2.4.7-1.2ubuntu7.3 | < 2.2.7-1ubuntu2.10+esm6 | < 2.1.3-4ubuntu0.11+esm8","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libppd","name":"libppd","label":"libppd","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libppd","purlType":"deb","versions":[{"text":"< 2:2.0.0-0ubuntu4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:2.0.0-0ubuntu4.1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.0","eol":{"isEol":true,"eolDate":"2026-08-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"11","label":"11 (Bullseye)","eolFrom":"2026-08-31T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"11.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"openprinting","product":"libppd","name":"libppd","label":"libppd","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.1b1","noFixRecorded":false,"fixedIn":null},{"text":"≤ 2.0.0","noFixRecorded":false,"fixedIn":null},{"text":"2.1:beta1*","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.1b1 | ≤ 2.0.0 | 2.1:beta1*","eol":null,"hubHref":"/vendor/openprinting/libppd"},{"vendor":"opensuse","product":"cups-filters&distro=openSUSE Leap 15.6","name":"cups-filters","label":"cups-filters&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cups-filters&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups","name":"cups","label":"cups","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.2.6-62.el8_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-client","name":"cups-client","label":"cups-client","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-client","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.2.6-62.el8_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-client-debuginfo","name":"cups-client-debuginfo","label":"cups-client-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-client-debuginfo","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.2.6-62.el8_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-debuginfo","name":"cups-debuginfo","label":"cups-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-debuginfo","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.2.6-62.el8_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-debugsource","name":"cups-debugsource","label":"cups-debugsource","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-debugsource","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.2.6-62.el8_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-devel","name":"cups-devel","label":"cups-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-devel","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.2.6-62.el8_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-filesystem","name":"cups-filesystem","label":"cups-filesystem","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-filesystem","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.2.6-62.el8_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-ipptool","name":"cups-ipptool","label":"cups-ipptool","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-ipptool","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.2.6-62.el8_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-ipptool-debuginfo","name":"cups-ipptool-debuginfo","label":"cups-ipptool-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-ipptool-debuginfo","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.2.6-62.el8_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-libs","name":"cups-libs","label":"cups-libs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-libs","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.2.6-62.el8_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-libs-debuginfo","name":"cups-libs-debuginfo","label":"cups-libs-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-libs-debuginfo","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.2.6-62.el8_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-lpd","name":"cups-lpd","label":"cups-lpd","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-lpd","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.2.6-62.el8_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-lpd-debuginfo","name":"cups-lpd-debuginfo","label":"cups-lpd-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-lpd-debuginfo","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.2.6-62.el8_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5 | < 1:2.2.6-62.el8_10","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-printerapp","name":"cups-printerapp","label":"cups-printerapp","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-printerapp","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-printerapp-debuginfo","name":"cups-printerapp-debuginfo","label":"cups-printerapp-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-printerapp-debuginfo","purlType":"rpm","versions":[{"text":"< 1:2.3.3op2-31.el9_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.3op2-31.el9_5","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Enterprise Storage 7.1","name":"cups-filters","label":"cups-filters&distro=SUSE Enterprise Storage 7.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Enterprise Storage 7.1","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","name":"cups-filters","label":"cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Manager Proxy LTS 4.3","name":"cups-filters","label":"cups-filters&distro=SUSE Manager Proxy LTS 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Manager Proxy LTS 4.3","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cups-filters&distro=SUSE Manager Server LTS 4.3","name":"cups-filters","label":"cups-filters&distro=SUSE Manager Server LTS 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cups-filters&distro=SUSE Manager Server LTS 4.3","purlType":"rpm","versions":[{"text":"< 1.25.0-150200.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.0-150200.3.22.1","eol":null,"hubHref":null}],"affectedCount":38,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6","label":"github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6","hostname":"github.com","tags":["X Refsource CONFIRM","ARTICLE","REPORT","Exploit","Vendor Advisory"]},{"url":"https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8","label":"github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8","hostname":"github.com","tags":["X Refsource MISC","Not Applicable"]},{"url":"https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47","label":"github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47","hostname":"github.com","tags":["X Refsource MISC","Not Applicable"]},{"url":"https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5","label":"github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5","hostname":"github.com","tags":["X Refsource MISC","Not Applicable"]},{"url":"https://www.cups.org","label":"www.cups.org","hostname":"www.cups.org","tags":["X Refsource MISC","Product"]},{"url":"https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I","label":"www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I","hostname":"www.evilsocket.net","tags":["X Refsource MISC","Exploit","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/09/27/3","label":"www.openwall.com/lists/oss-security/2024/09/27/3","hostname":"www.openwall.com","tags":["Mailing List"]},{"url":"https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477","label":"github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477","hostname":"github.com","tags":["Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00047.html","label":"lists.debian.org/debian-lts-announce/2024/09/msg00047.html","hostname":"lists.debian.org","tags":["Mailing List"]},{"url":"https://security.netapp.com/advisory/ntap-20241011-0001/","label":"security.netapp.com/advisory/ntap-20241011-0001/","hostname":"security.netapp.com","tags":[]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0016","label":"psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0016","hostname":"psirt.global.sonicwall.com","tags":[]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-47175","label":"security.alpinelinux.org/vuln/CVE-2024-47175","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503225-1/","label":"www.suse.com/support/update/announcement/2025/suse-su-202503225-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1230932","label":"bugzilla.suse.com/1230932","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246533","label":"bugzilla.suse.com/1246533","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47175","label":"www.suse.com/security/cve/CVE-2024-47175","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9470","label":"access.redhat.com/errata/RHSA-2024:9470","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314256","label":"bugzilla.redhat.com/show_bug.cgi?id=2314256","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9470.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9470.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47175","label":"access.redhat.com/security/cve/CVE-2024-47175","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2024-002","label":"access.redhat.com/security/vulnerabilities/RHSB-2024-002","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47175","label":"www.cve.org/CVERecord?id=CVE-2024-47175","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47175","label":"nvd.nist.gov/vuln/detail/CVE-2024-47175","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/","label":"www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/","hostname":"www.evilsocket.net","tags":["ARTICLE"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0083","label":"access.redhat.com/errata/RHSA-2025:0083","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0083.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0083.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-47175","label":"ubuntu.com/security/CVE-2024-47175","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7041-1","label":"ubuntu.com/security/notices/USN-7041-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7045-1","label":"ubuntu.com/security/notices/USN-7045-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/blog/cups-remote-code-execution-vulnerability-fix-available","label":"ubuntu.com/blog/cups-remote-code-execution-vulnerability-fix-available","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7041-2","label":"ubuntu.com/security/notices/USN-7041-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7041-3","label":"ubuntu.com/security/notices/USN-7041-3","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-47175","label":"security-tracker.debian.org/tracker/CVE-2024-47175","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["MGASA-2024-0327","OPENSUSE-SU-2025:15563-1","OPENSUSE-SU-2026:21850-1","RHSA-2024:7346","RHSA-2024:7461","RHSA-2024:7462","RHSA-2024:7463","RHSA-2024:7503","RHSA-2024:7504","RHSA-2024:7506","RHSA-2024:7551","RHSA-2024:7553","RHSA-2024:7623","SUSE-SU-2025:03261-1"],"duplicates":[],"related":["OPENSUSE-SU-2025:15563-1","OPENSUSE-SU-2026:21850-1","SUSE-SU-2025:03261-1"]},"timeline":[{"kind":"published","date":"2024-09-26T21:18:25.265Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-03T22:20:02.661Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T02:27:03.891Z","stale":false,"partial":false}}