VDB
ANCHORE-2024-47177
ANCHORE-2024-47177
PUBLISHED
CUPS is a standards-based, open-source printing system, and cups-filters provides backends, filters, and other software for CUPS 2.x to use on non-Mac OS systems. Any value passed to `FoomaticRIPCommandLine` via a PPD file will be executed as a user controlled command. When combined with other logic bugs as described in CVE_2024-47176, this can lead to remote command execution.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| OpenPrinting | cups-filters | 0, 0, 0 |
Timeline
- Sep 26, 2024 CVE Published
- Sep 27, 2024 PoC Published
- Feb 4, 2026 PoC Published
References
- https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8 url
- https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47 url
- https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5 url
- https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6 url
- https://www.cups.org url
- https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I url