CVE-2024-47175

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-47175
CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.

8.6 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8 Not Applicable
https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47 Not Applicable
https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5 Not Applicable
https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6 Exploit Vendor Advisory
https://www.cups.org Product
https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I Exploit Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/09/27/3 Mailing List
https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477 Patch
https://lists.debian.org/debian-lts-announce/2024/09/msg00047.html Mailing List
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0016
https://security.netapp.com/advisory/ntap-20241011-0001/
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:openprinting:libppd:*:*:*:*:*:*:*:*
cpe:2.3:a:openprinting:libppd:2.1:beta1*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
History

03 Nov 2025, 23:16

Type Values Removed Values Added
References
  • () https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0016 -
  • () https://security.netapp.com/advisory/ntap-20241011-0001/ -

29 Sep 2025, 13:42

Type Values Removed Values Added
References () https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8 - () https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8 - Not Applicable
References () https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47 - () https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47 - Not Applicable
References () https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5 - () https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5 - Not Applicable
References () https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6 - () https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6 - Exploit, Vendor Advisory
References () https://www.cups.org - () https://www.cups.org - Product
References () https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I - () https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I - Exploit, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2024/09/27/3 - () http://www.openwall.com/lists/oss-security/2024/09/27/3 - Mailing List
References () https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477 - () https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477 - Patch
References () https://lists.debian.org/debian-lts-announce/2024/09/msg00047.html - () https://lists.debian.org/debian-lts-announce/2024/09/msg00047.html - Mailing List
CPE cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:a:openprinting:libppd:2.1:beta1*:*:*:*:*:*:*
cpe:2.3:a:openprinting:libppd:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
First Time Openprinting
Debian
Debian debian Linux
Openprinting libppd

21 Nov 2024, 09:39

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/09/27/3 -
  • () https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477 -
  • () https://lists.debian.org/debian-lts-announce/2024/09/msg00047.html -

30 Sep 2024, 12:46

Type Values Removed Values Added
Summary
  • (es) CUPS es un sistema de impresión de código abierto basado en estándares, y `libppd` se puede utilizar para la compatibilidad con archivos PPD heredados. La función `libppd` `ppdCreatePPDFromIPP2` no desinfecta los atributos IPP al crear el búfer PPD. Cuando se utiliza en combinación con otras funciones como `cfGetPrinterAttributes5`, puede dar lugar a una entrada controlada por el usuario y, en última instancia, a la ejecución de código a través de Foomatic. Esta vulnerabilidad puede ser parte de una cadena de explotación que conduce a la ejecución remota de código (RCE), como se describe en CVE-2024-47176.

26 Sep 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-26 22:15

Updated : 2025-11-03 23:16

NVD link : CVE-2024-47175

Mitre link : CVE-2024-47175

CVE.ORG link : CVE-2024-47175

JSON object : View

Products Affected

debian

  • debian_linux

openprinting

  • libppd
CWE
CWE-20

Improper Input Validation

NVD-CWE-noinfo