https://seclists.org/oss-sec/2024/q3/289: CUPS printing system vulnerabilities
Published Sep 27, 2024
·Updated
Affected Software
1 affected component
OpenPrinting CUPS<=2.0.1
Frequently Asked Questions
1
What is the severity of CVE-2024-47176?
CVE-2024-47176 is classified as a high severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2024-47176?
To fix CVE-2024-47176, upgrade to version 2.0.2 or later of the CUPS printing system.
3
What systems are affected by CVE-2024-47176?
CVE-2024-47176 affects all versions of CUPS up to and including 2.0.1.
4
How does CVE-2024-47176 exploit the CUPS system?
CVE-2024-47176 exploits the CUPS system by binding to UDP INADDR_ANY:631 and accepting unauthorized Get-Printer-Attributes IPP requests from any source.
5
What are the potential impacts of CVE-2024-47176?
The potential impacts of CVE-2024-47176 include information disclosure and the ability for an attacker to control the printer attributes being reported.