{"id":"CVE-2024-47177","aliases":["EUVD-2024-42299","MGASA-2024-0327","UBUNTU-CVE-2024-47177"],"status":"rejected","title":"Updated cups \u0026 cups-filters packages fix security vulnerabilities","description":"** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of this candidate. This CVE was issued to a vulnerability that is dependent on CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. According to rule 4.2.15 of the CVE CNA rules, \\\"CNAs MUST NOT assign a different CVE ID to a Vulnerability that is fully interdependent with another Vulnerability. The Vulnerabilities are effectively the same single Vulnerability and MUST use one CVE ID.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","from":"euvd"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2024-09-26T21:56:36Z","modified":"2026-04-22T15:10:46Z","exploits":[{"source":"metasploit","id":"exploit/multi/misc/cups_ipp_remote_code_execution","title":"CUPS IPP Attributes LAN Remote Code Execution","type":"exploit","platform":"Linux,Unix","date":"2024-09-26","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/misc/cups_ipp_remote_code_execution"},{"source":"pocgithub","id":"referefref/cupspot-2024-47177","title":"referefref/cupspot-2024-47177","date":"2024-09-27","url":"https://github.com/referefref/cupspot-2024-47177"}],"affected":[{"source":"osv","ecosystem":"Mageia:9","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-1.3.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.16-6.1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.76-1","1.1.0-1","1.1.0-1build1","1.3.0-1","1.4.0-1","1.5.0-1","1.6.0-1","1.7.0-1","1.8.1-1","1.8.2-1","1.8.2-2","1.8.2-2ubuntu2","1.8.2-2ubuntu3","1.8.3-2ubuntu1","1.8.3-2ubuntu2","1.8.3-2ubuntu3","1.8.3-2ubuntu3.1","1.8.3-2ubuntu3.4","1.8.3-2ubuntu3.5","1.8.3-2ubuntu3.5+esm1","1.8.3-2ubuntu3.5+esm2","1.8.3-2ubuntu3.5+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.17.9-0ubuntu1","1.17.9-1","1.20.0-2","1.20.1-1","1.20.1-1build1","1.20.2-0ubuntu1","1.20.2-0ubuntu2","1.20.2-0ubuntu3","1.20.2-0ubuntu3.1","1.20.2-0ubuntu3.3","1.20.2-0ubuntu3.3+esm1","1.20.2-0ubuntu3.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.25.11-0ubuntu1","1.25.11-1","1.25.12-1","1.25.13-1","1.26.0-1","1.26.1-1","1.26.2-1","1.27.0-1","1.27.0-2","1.27.1-1","1.27.1-2","1.27.1-3","1.27.2-1","1.27.3-1","1.27.4-1","1.27.4-1ubuntu0.2","1.27.4-1ubuntu0.3","1.27.4-1ubuntu0.4","1.27.4-1ubuntu0.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.28.10-2","1.28.11-1","1.28.11-2","1.28.12-1","1.28.13-0ubuntu1","1.28.14-1","1.28.15-0ubuntu1","1.28.15-0ubuntu1.2","1.28.15-0ubuntu1.3","1.28.15-0ubuntu1.4","1.28.15-0ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.0-0ubuntu1","2.0.0-0ubuntu3","2.0.0-0ubuntu4","2.0.0-0ubuntu4.1"]}],"products":[{"vendor":"openprinting","product":"cups-filters"}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2024-47177","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0327.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33596","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/09/26/5","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-7041-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7043-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-47177","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47177","tags":["report"]},{"url":"https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47","tags":["report"]},{"url":"https://ubuntu.com/blog/cups-remote-code-execution-vulnerability-fix-available","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-47177","description":"** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of this candidate. This CVE was issued to a vulnerability that is dependent on CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. According to rule 4.2.15 of the CVE CNA rules, \\\"CNAs MUST NOT assign a different CVE ID to a Vulnerability that is fully interdependent with another Vulnerability. The Vulnerabilities are effectively the same single Vulnerability and MUST use one CVE ID.","status":"rejected","published":"2024-09-26T21:56:36.661Z","modified":"2025-05-12T21:08:50.663Z","updated_at":"2026-11-02T14:33:57.302325Z"}],"euvd":[{"id":"EUVD-2024-42299","description":"** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of this candidate. This CVE was issued to a vulnerability that is dependent on CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. According to rule 4.2.15 of the CVE CNA rules, \\\"CNAs MUST NOT assign a different CVE ID to a Vulnerability that is fully interdependent with another Vulnerability. The Vulnerabilities are effectively the same single Vulnerability and MUST use one CVE ID.","status":"published","published":"2024-09-26T21:56:36Z","modified":"2025-05-12T21:08:50Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:49.308721Z"}],"nvd":[{"id":"CVE-2024-47177","description":"Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of this candidate. This CVE was issued to a vulnerability that is dependent on CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. According to rule 4.2.15 of the CVE CNA rules, \\\"CNAs MUST NOT assign a different CVE ID to a Vulnerability that is fully interdependent with another Vulnerability. The Vulnerabilities are effectively the same single Vulnerability and MUST use one CVE ID.","status":"rejected","published":"2024-09-26T22:15:04.74Z","modified":"2025-05-12T21:15:46.387Z","updated_at":"2026-11-02T14:10:29.044588Z"}],"osv":[{"id":"CVE-2024-47177","description":"Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of this candidate. This CVE was issued to a vulnerability that is dependent on CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. According to rule 4.2.15 of the CVE CNA rules, \\\"CNAs MUST NOT assign a different CVE ID to a Vulnerability that is fully interdependent with another Vulnerability. The Vulnerabilities are effectively the same single Vulnerability and MUST use one CVE ID.","status":"withdrawn","published":"2024-09-26T22:15:04Z","modified":"2026-04-16T04:42:06.489631207Z","updated_at":"2026-11-02T15:44:43.253252Z"},{"id":"MGASA-2024-0327","title":"Updated cups \u0026 cups-filters packages fix security vulnerabilities","description":"The `cfGetPrinterAttributes5` function in `libcupsfilters` does not\nsanitize IPP attributes returned from an IPP server. When these IPP\nattributes are used, for instance, to generate a PPD file, this can lead\nto attacker controlled data to be provided to the rest of the CUPS\nsystem. (CVE-2024-47076)\nThe `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP\nattributes when creating the PPD buffer. When used in combination with\nother functions such as `cfGetPrinterAttributes5`, can result in user\ncontrolled input and ultimately code execution via Foomatic. This\nvulnerability can be part of an exploit chain leading to remote code\nexecution (RCE), as described in CVE-2024-47176. (CVE-2024-47175)\n`cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet\nfrom any source, and can cause the `Get-Printer-Attributes` IPP request\nto an attacker controlled URL. When combined with other vulnerabilities,\nsuch as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker\ncan execute arbitrary commands remotely on the target machine without\nauthentication when a malicious printer is printed to. (CVE-2024-47176)\nAny value passed to `FoomaticRIPCommandLine` via a PPD file will be\nexecuted as a user controlled command. When combined with other logic\nbugs as described in CVE_2024-47176, this can lead to remote command\nexecution. (CVE-2024-47177)\n","status":"published","published":"2024-10-07T17:39:29Z","modified":"2026-04-16T04:41:30.754748447Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"UBUNTU-CVE-2024-47177","description":"Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47076, CVE-2024-47175, CVE-2024-47176. Reason: This candidate is a duplicate of CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. Notes: All CVE users should reference CVE-2024-47076, CVE-2024-47175, and/or CVE-2024-47176 instead of this candidate. This CVE was issued to a vulnerability that is dependent on CVE-2024-47076, CVE-2024-47175, and CVE-2024-47176. According to rule 4.2.15 of the CVE CNA rules, \\\"CNAs MUST NOT assign a different CVE ID to a Vulnerability that is fully interdependent with another Vulnerability. The Vulnerabilities are effectively the same single Vulnerability and MUST use one CVE ID.","status":"published","published":"2024-10-06T19:00:00Z","modified":"2026-04-22T15:10:46.417745Z","updated_at":"2026-11-02T16:55:02.636559Z"}]}}