USN-7044-1: libcupsfilters vulnerability

Published Sep 26, 2024

Updated

Simone Margaritelli discovered that libcupsfilters incorrectly sanitized IPP data when creating PPD files. A remote attacker could possibly use this issue to manipulate PPD files and execute arbitrary code when a printer is used.

Affected Software

1 affected component

OpenPrinting libcupsfilters

Event History

May 12, 2025

Advisory Published

via Ubuntu·11:50 PM

Data Sourced

via Ubuntu·11:50 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2024-47076

Frequently Asked Questions

What is the severity of USN-7044-1?

USN-7044-1 is classified as a medium severity vulnerability affecting the handling of IPP data in libcupsfilters.

How do I fix USN-7044-1?

To fix USN-7044-1, update libcupsfilters to version 2.0.0-0ubuntu7.1 or newer on affected Ubuntu systems.

Who is affected by USN-7044-1?

Users of Ubuntu 24.04 with libcupsfilters versions prior to 2.0.0-0ubuntu7.1 are affected by USN-7044-1.

What can an attacker do with USN-7044-1?

An attacker exploiting USN-7044-1 could manipulate PPD files and potentially execute arbitrary code when a printer is used.

When was USN-7044-1 disclosed?

USN-7044-1 was disclosed to address a vulnerability in libcupsfilters related to IPP data sanitization.