CVE-2024-47177
Updated cups & cups-filters packages fix security vulnerabilities
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of this candidate. This CVE was issued to a vulnerability that is dependent on CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. According to rule 4.2.15 of the CVE CNA rules, "CNAs MUST NOT assign a different CVE ID to a Vulnerability that is fully interdependent with another Vulnerability. The Vulnerabilities are effectively the same single Vulnerability and MUST use one CVE ID.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
What each source reports
EUVD Score usedEUVD-2024-42299
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of this candidate. This CVE was issued to a vulnerability that is dependent on CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. According to rule 4.2.15 of the CVE CNA rules, "CNAs MUST NOT assign a different CVE ID to a Vulnerability that is fully interdependent with another Vulnerability. The Vulnerabilities are effectively the same single Vulnerability and MUST use one CVE ID.
- Record
EUVD-2024-42299- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
CVE List No score
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of this candidate. This CVE was issued to a vulnerability that is dependent on CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. According to rule 4.2.15 of the CVE CNA rules, "CNAs MUST NOT assign a different CVE ID to a Vulnerability that is fully interdependent with another Vulnerability. The Vulnerabilities are effectively the same single Vulnerability and MUST use one CVE ID.
- Record
CVE-2024-47177- Updated
- 2026-11-02
NVD No score
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of this candidate. This CVE was issued to a vulnerability that is dependent on CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. According to rule 4.2.15 of the CVE CNA rules, "CNAs MUST NOT assign a different CVE ID to a Vulnerability that is fully interdependent with another Vulnerability. The Vulnerabilities are effectively the same single Vulnerability and MUST use one CVE ID.
- Record
CVE-2024-47177- Updated
- 2026-11-02
OSV No score
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of this candidate. This CVE was issued to a vulnerability that is dependent on CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. According to rule 4.2.15 of the CVE CNA rules, "CNAs MUST NOT assign a different CVE ID to a Vulnerability that is fully interdependent with another Vulnerability. The Vulnerabilities are effectively the same single Vulnerability and MUST use one CVE ID.
- Record
CVE-2024-47177- Updated
- 2026-11-02
OSVMGASA-2024-0327 No score
Updated cups & cups-filters packages fix security vulnerabilities
The cfGetPrinterAttributes5 function in libcupsfilters does not
sanitize IPP attributes returned from an IPP server. When these IPP
attributes are used, for instance, to generate a PPD file, this can lead
to attacker controlled data to be provided to the rest of the CUPS
system. (CVE-2024-47076)
The libppd function ppdCreatePPDFromIPP2 does not sanitize IPP
attributes when creating the PPD buffer. When used in combination with
other functions such as cfGetPrinterAttributes5, can result in user
controlled input and ultimately code execution via Foomatic. This
vulnerability can be part of an exploit chain leading to remote code
execution (RCE), as described in CVE-2024-47176. (CVE-2024-47175)
cups-browsed binds to INADDR_ANY:631, causing it to trust any packet
from any source, and can cause the Get-Printer-Attributes IPP request
to an attacker controlled URL. When combined with other vulnerabilities,
such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker
can execute arbitrary commands remotely on the target machine without
authentication when a malicious printer is printed to. (CVE-2024-47176)
Any value passed to FoomaticRIPCommandLine via a PPD file will be
executed as a user controlled command. When combined with other logic
bugs as described in CVE_2024-47176, this can lead to remote command
execution. (CVE-2024-47177)
- Record
MGASA-2024-0327- Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-47177 No score
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of this candidate. This CVE was issued to a vulnerability that is dependent on CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. According to rule 4.2.15 of the CVE CNA rules, "CNAs MUST NOT assign a different CVE ID to a Vulnerability that is fully interdependent with another Vulnerability. The Vulnerabilities are effectively the same single Vulnerability and MUST use one CVE ID.
- Record
UBUNTU-CVE-2024-47177- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsMageia:9 From an advisory covering 4 CVEs |
before 2.4.6-1.3.mga9 | 2.4.6-1.3.mga9 |
cups-filtersMageia:9 From an advisory covering 4 CVEs |
before 1.28.16-6.1.mga9 | 1.28.16-6.1.mga9 |
cups-filtersUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.0.76-11.1.0-11.1.0-1build11.3.0-11.4.0-1 Show 17 moreShow less1.5.0-11.6.0-11.7.0-11.8.1-11.8.2-11.8.2-21.8.2-2ubuntu21.8.2-2ubuntu31.8.3-2ubuntu11.8.3-2ubuntu21.8.3-2ubuntu31.8.3-2ubuntu3.11.8.3-2ubuntu3.41.8.3-2ubuntu3.51.8.3-2ubuntu3.5+esm11.8.3-2ubuntu3.5+esm21.8.3-2ubuntu3.5+esm3 |
None known |
cups-filtersUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.17.9-0ubuntu11.17.9-11.20.0-21.20.1-11.20.1-1build1 Show 7 moreShow less1.20.2-0ubuntu11.20.2-0ubuntu21.20.2-0ubuntu31.20.2-0ubuntu3.11.20.2-0ubuntu3.31.20.2-0ubuntu3.3+esm11.20.2-0ubuntu3.3+esm2 |
None known |
cups-filtersUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.25.11-0ubuntu11.25.11-11.25.12-11.25.13-11.26.0-1 Show 14 moreShow less1.26.1-11.26.2-11.27.0-11.27.0-21.27.1-11.27.1-21.27.1-31.27.2-11.27.3-11.27.4-11.27.4-1ubuntu0.21.27.4-1ubuntu0.31.27.4-1ubuntu0.41.27.4-1ubuntu0.4+esm1 |
None known |
cups-filtersUbuntu:22.04:LTS |
All versions, plus listed versions 1.28.10-21.28.11-11.28.11-21.28.12-11.28.13-0ubuntu1 Show 6 moreShow less1.28.14-11.28.15-0ubuntu11.28.15-0ubuntu1.21.28.15-0ubuntu1.31.28.15-0ubuntu1.41.28.15-0ubuntu1.5 |
None known |
cups-filtersUbuntu:24.04:LTS |
All versions, plus listed versions 2.0.0-0ubuntu12.0.0-0ubuntu32.0.0-0ubuntu42.0.0-0ubuntu4.1 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | CUPS IPP Attributes LAN Remote Code Execution | 2024-09-26 |
| PoC in GitHub | referefref/cupspot-2024-47177 | 2024-09-27 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| first indexed | CVE List, EUVD, Metasploit, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-47177 has been rejected by its source and should not be treated as a live vulnerability, published September 26, 2024. Public exploit code exists.