PT-2024-8003 · Cups+7 · Cups Cups-Browsed+7
Habbie
·
Published
2024-09-26
·
Updated
2026-05-13
·
CVE-2024-47850
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
CUPS cups-browsed versions prior to 2.5b1
Description
The issue is related to an uncontrolled resource consumption in the CUPS cups-browsed service, which can be exploited by a remote attacker to cause a denial of service. It is also associated with a DDoS amplification attack, where the service sends an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added.
Recommendations
For versions prior to 2.5b1, update to version 2.5b1 or later to resolve the issue. As a temporary workaround, consider restricting access to the cups-browsed service to minimize the risk of exploitation. Avoid using the service to probe new printers until the issue is resolved.
Fix
DoS
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Cups Cups-Browsed
Centos
Debian
Red Hat
Red Os
Suse