CVE-2024-47076

NameCVE-2024-47076
DescriptionCUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-3905-1, DSA-5778-1
Debian Bugs1082821, 1082827

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
cups-filters (PTS)bullseye1.28.7-1+deb11u2vulnerable
bullseye (security)1.28.7-1+deb11u3fixed
bookworm, bookworm (security)1.28.17-3+deb12u1fixed
forky, sid, trixie1.28.17-6fixed
libcupsfilters (PTS)forky, sid, trixie2.0.0-3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
cups-filterssourcebullseye1.28.7-1+deb11u3DLA-3905-1
cups-filterssourcebookworm1.28.17-3+deb12u1DSA-5778-1
cups-filterssource(unstable)1.28.17-51082827
libcupsfilterssource(unstable)2.0.0-31082821

Notes

https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5
https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/
Fixed by: https://github.com/OpenPrinting/libcupsfilters/commit/95576ec3d20c109332d14672a807353cdc551018
Search for package or bug name: Reporting problems