USN-7043-3: cups-filters vulnerability

Published Oct 7, 2024
·
Updated

USN-7043-1 fixed a vulnerability in cups-filters. This update provides the corresponding update for Ubuntu 16.04 LTS Original advisory details: Simone Margaritelli discovered that the cups-filters cups-browsed component could be used to create arbitrary printers from outside the local network. In combination with issues in other printing components, a remote attacker could possibly use this issue to connect to a system, created manipulated PPD files, and execute arbitrary code when a printer is used. This update disables support for the legacy CUPS printer discovery protocol. (CVE-2024-47176)

Affected Software

4 affected componentsFixes available
All of the following
ubuntu/cups-browsed<1.8.3-2ubuntu3.5+esm2
1.8.3-2ubuntu3.5+esm2
Ubuntu Ubuntu=16.04
All of the following
ubuntu/cups-filters<1.8.3-2ubuntu3.5+esm2
1.8.3-2ubuntu3.5+esm2
Ubuntu Ubuntu=16.04

Event History

Oct 7, 2024
Advisory Published
via Ubuntu·12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of USN-7043-3?

USN-7043-3 addresses a critical vulnerability affecting the cups-filters package in Ubuntu 16.04 LTS.

2

How do I fix USN-7043-3?

To fix USN-7043-3, update the cups-browsed and cups-filters packages to version 1.8.3-2ubuntu3.5+esm2.

3

What vulnerabilities are fixed in USN-7043-3?

USN-7043-3 fixes an arbitrary printer creation vulnerability in the cups-browsed component of cups-filters.

4

Which Ubuntu versions are affected by USN-7043-3?

USN-7043-3 affects Ubuntu 16.04 LTS users who have cups-browsed and cups-filters installed.

5

Who discovered the vulnerability addressed by USN-7043-3?

The vulnerability fixed in USN-7043-3 was discovered by Simone Margaritelli.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203