CVE-2024-47076

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-47076
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-47076.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-47076
Downstream
Related
Published
2024-09-26T21:18:22.067Z
Modified
2025-11-20T00:32:26.221009Z
Severity
  • 8.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N CVSS Calculator
Summary
libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server
Details

CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former cups-filters package as library functions to be used for the data format conversion tasks needed in Printer Applications. The cfGetPrinterAttributes5 function in libcupsfilters does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.

Database specific 
{
    "cwe_ids": [
        "CWE-20"
    ]
}
References

Affected packages

Git

github.com/openprinting/cups-browsed

Affected ranges

Type
GIT
Repo
https://github.com/openprinting/cups-browsed
Events
Introduced
0 Unknown introduced commit / All previous commits are affected

github.com/openprinting/cups-filters

Affected ranges

Type
GIT
Repo
https://github.com/openprinting/cups-filters
Events
Introduced
0 Unknown introduced commit / All previous commits are affected

github.com/openprinting/libcupsfilters

Affected ranges

Type
GIT
Repo
https://github.com/openprinting/libcupsfilters
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
95576ec3d20c109332d14672a807353cdc551018

Affected versions

2.*

2.0.0
2.0b1
2.0b2
2.0b3
2.0b4
2.0rc1
2.0rc2
2.1b1

Database specific

vanir_signatures

[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "161359513121773949907926455193830173566",
                "154108727522163752832459989576150002054",
                "303212411057175221772250729228838139471",
                "10013934268424892536252883675686381330"
            ],
            "threshold": 0.9
        },
        "source": "https://github.com/openprinting/libcupsfilters/commit/95576ec3d20c109332d14672a807353cdc551018",
        "target": {
            "file": "cupsfilters/ipp.c"
        },
        "id": "CVE-2024-47076-1f7f608d",
        "signature_type": "Line",
        "signature_version": "v1"
    }
]

github.com/openprinting/libppd

Affected ranges

Type
GIT
Repo
https://github.com/openprinting/libppd
Events
Introduced
0 Unknown introduced commit / All previous commits are affected