PT-2024-6441 · Cups+3 · Cups+3
Evilsocket
·
Published
2024-09-26
·
Updated
2026-05-13
·
CVE-2024-47177
CVSS v3.1
9.0
Critical
| Vector | AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
CUPS versions 2.x
cups-filters versions up to 2.0.1
Description
The issue is related to the
FoomaticRIPCommandLine function in the CUPS printing system, which allows remote command execution via a PPD file. This can be exploited when combined with other logic bugs, leading to the execution of arbitrary commands. The vulnerability is critical and can be exploited with low difficulty, requiring no user interaction and exploiting network-based vulnerabilities. It allows an attacker to send crafted packets that can manipulate printer attributes, leading to the injection of malicious PPD files.Recommendations
For CUPS versions 2.x: Update to a version that fixes the vulnerability.
For cups-filters versions up to 2.0.1: Update to a version higher than 2.0.1 to fix the vulnerability.
As a temporary workaround, consider disabling the
FoomaticRIPCommandLine function until a patch is available.Exploit
Fix
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cups
Debian
Red Os
Cups-Filters