CVE-2024-47850: cups-filters Uncontrolled Resource Consumption
Vulnerability summary
CVE-2024-47850 is a high (CVSS 7.5) Uncontrolled Resource Consumption vulnerability in cups-filters. EPSS estimates a 0.85% chance of exploitation in the next 30 days, higher than 57.5% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 15 · Related 6Timeline
- 04-10-2024PublishedVulnerability first disclosed.
- 11-10-2024Last modifiedVulnerability information updated.
Description
CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS amplification attacks.)
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.85%
Chance of exploitation in the next 30 days
Percentile
58%
Versus all other CVEs
30-day change
0.00 pp
From 0.85% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse2 products
- cups-filters&distro=SUSE Linux Enterprise Server 12 SP5-LTSS< 1.0.58-19.32.1
- cups-filters&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 1.0.58-19.32.1
Ubuntu2 products
- cups-browsed< 2.0.0-0ubuntu10.1
- cups-filters< 1.8.3-2ubuntu3.5+esm2 | < 1.20.2-0ubuntu3.3+esm1 | < 1.27.4-1ubuntu0.3 | < 1.28.15-0ubuntu1.3
Debian1 product
- cups-filtersAll versions (No fix recorded)
3 vendors · 5 products
