https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T19:45:40.400426+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-47076 CVE-2024-47076 — libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server 2026-09-29T19:45:40.444567+00:00

Affected: OpenPrinting libcupsfilters

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.

 https://vulnerability.circl.lu/vuln/usn-7043-1 USN-7043-1 — cups-filters vulnerabilities 2026-09-29T19:45:40.444669+00:00

Affected: Ubuntu:20.04:LTS: cups-filters, Ubuntu:22.04:LTS: cups-filters

Simone Margaritelli discovered that the cups-filters cups-browsed component could be used to create arbitrary printers from outside the local network. In combination with issues in other printing components, a remote attacker could possibly use this issue to connect to a system, created manipulated PPD files, and execute arbitrary code when a printer is used. This update disables support for the legacy CUPS printer discovery protocol. (CVE-2024-47176)

Simone Margaritelli discovered that cups-filters incorrectly sanitized IPP data when creating PPD files. A remote attacker could possibly use this issue to manipulate PPD files and execute arbitrary code when a printer is used. (CVE-2024-47076)