Vulnerability-Lookup

OPENSUSE-SU-2026:21850-1

Vulnerability from csaf_opensuse - Published: 2026-09-14 13:25 - Updated: 2026-09-15 16:13

Summary

Security update for cups-filters

Severity

Important

Notes

Title of the patch: Security update for cups-filters

Description of the patch: This update for cups-filters fixes the following issues: Changes in cups-filters: - CVE-2026-64611: Fixed Infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field. A user who controls an IEEE-1284 device ID consumed by `cfIEEE1284GetMakeModel` can drive `cfIEEE1284NormalizeMakeModel` into an infinite loop. (bsc#1273145,GHSA-rcq7-rv5g-j3r4) - CVE-2026-64612: Fixed Malformed PNG aborts CUPS image filter process (missing libpng setjmp recovery) A authenticated client that can submit an image print job can abort the CUPS filter process by supplying a malformed PNG. (bsc#1273146,GHSA-7mxj-cfq5-84ch) - Provide cups-browsed as separated cups-filters-cups-browsed sub-package so users can uninstall this sub-package to completely avoid the generic security risk of cups-browsed. cups-browsed auto-creates local print queues for printers which are announced via DNS-SD. It is a generic security risk when a service (cups-browsed.service) accepts any (possibly malicious) incoming information from any host in the local network (i.e. any DNS-SD announcements) and from that information it auto-creates print queue configurations for CUPS (where its server program cupsd runs as root). For more information see the openSUSE support database article https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings - Fixed a regression "Error about PPD file during 'driverless' printer setup" (boo#1256868) and "ppd pull out from [driverless] printer feature broken" (bsc#1256977) - unbreak qpdf [bsc#1253678] - CVE-2024-47176: Fixed cups-browsed binds to UDP INADDR_ANY:631 (bsc#1230939) and to avoid CVE-2024-47850 "cups-browsed can be abused to initiate remote DDoS against third-party targets" (bsc#1231294) by removing legacy CUPS Browsing support in cups-browsed (introduced 2012) which is no longer needed nowadays. CUPS browsing was removed from CUPS since version 1.6. Legacy CUPS Browsing is a generic security risk, see the section "Automated print queue setup via cups-browsed" in https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings - CVE-2024-47076: Fixed lack of input sanitization in cfGetPrinterAttributes5 (bsc#1230937) - CVE-2024-47175: Fixed lack of input sanitization in _ppdCreateFromIPP() (bsc#1230932) - In general regarding CUPS and cups-browsed security issues see https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings

Patchnames: openSUSE-Leap-16.0-packagehub-589

CVE-2024-47076

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2024-47175

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products, the same list as for CVE-2024-47076

Threats

Impact important

CVE-2024-47176

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 12 products, the same list as for CVE-2024-47076

Threats

Impact important

CVE-2024-47850

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2024-47076

Threats

Impact moderate

CVE-2026-64611

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2024-47076

Threats

Impact moderate

CVE-2026-64612

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 12 products, the same list as for CVE-2024-47076

Threats

Impact moderate

References

35 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://bugzilla.suse.com/1230932	self
https://bugzilla.suse.com/1230937	self
https://bugzilla.suse.com/1230939	self
https://bugzilla.suse.com/1231294	self
https://bugzilla.suse.com/1253678	self
https://bugzilla.suse.com/1256868	self
https://bugzilla.suse.com/1256977	self
https://bugzilla.suse.com/1273145	self
https://bugzilla.suse.com/1273146	self
https://www.suse.com/security/cve/CVE-2024-47076/	self
https://www.suse.com/security/cve/CVE-2024-47175/	self
https://www.suse.com/security/cve/CVE-2024-47176/	self
https://www.suse.com/security/cve/CVE-2024-47850/	self
https://www.suse.com/security/cve/CVE-2026-64611/	self
https://www.suse.com/security/cve/CVE-2026-64612/	self
https://www.suse.com/security/cve/CVE-2024-47076	external
https://bugzilla.suse.com/1230932	external
https://bugzilla.suse.com/1230937	external
https://bugzilla.suse.com/1265889	external
https://www.suse.com/security/cve/CVE-2024-47175	external
https://bugzilla.suse.com/1230932	external
https://bugzilla.suse.com/1256977	external
https://bugzilla.suse.com/1265885	external
https://www.suse.com/security/cve/CVE-2024-47176	external
https://bugzilla.suse.com/1230932	external
https://bugzilla.suse.com/1230939	external
https://bugzilla.suse.com/1249128	external
https://www.suse.com/security/cve/CVE-2024-47850	external
https://bugzilla.suse.com/1231294	external
https://www.suse.com/security/cve/CVE-2026-64611	external
https://bugzilla.suse.com/1273145	external
https://www.suse.com/security/cve/CVE-2026-64612	external
https://bugzilla.suse.com/1273146	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for cups-filters",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for cups-filters fixes the following issues:\n\nChanges in cups-filters:\n\n- CVE-2026-64611: Fixed Infinite-loop CPU-exhaustion DoS in\n   cfIEEE1284NormalizeMakeModel on empty MDL field.\n  A user who controls an IEEE-1284 device ID consumed by\n   `cfIEEE1284GetMakeModel` can drive\n   `cfIEEE1284NormalizeMakeModel` into an infinite loop.\n  (bsc#1273145,GHSA-rcq7-rv5g-j3r4)\n\n- CVE-2026-64612: Fixed Malformed PNG aborts CUPS image filter process\n   (missing libpng setjmp recovery)\n  A authenticated client that can submit an image print job\n   can abort the CUPS filter process by supplying a malformed PNG.\n  (bsc#1273146,GHSA-7mxj-cfq5-84ch)\n\n- Provide cups-browsed as separated cups-filters-cups-browsed\n  sub-package so users can uninstall this sub-package\n  to completely avoid the generic security risk of cups-browsed.\n  cups-browsed auto-creates local print queues for printers which\n  are announced via DNS-SD. It is a generic security risk when a\n  service (cups-browsed.service) accepts any (possibly malicious)\n  incoming information from any host in the local network\n  (i.e. any DNS-SD announcements) and from that information\n  it auto-creates print queue configurations for CUPS\n  (where its server program cupsd runs as root).\n  For more information see the openSUSE support database article\n  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings\n\n- Fixed a regression \"Error about PPD file during \u0027driverless\u0027 printer setup\"\n  (boo#1256868) and \"ppd pull out from [driverless] printer feature broken\"\n  (bsc#1256977)\n\n- unbreak qpdf [bsc#1253678]\n\n- CVE-2024-47176: Fixed cups-browsed binds to UDP INADDR_ANY:631 (bsc#1230939)\n  and to avoid CVE-2024-47850 \"cups-browsed can be abused to\n  initiate remote DDoS against third-party targets\" (bsc#1231294)\n  by removing legacy CUPS Browsing support in cups-browsed\n  (introduced 2012) which is no longer needed nowadays.\n  CUPS browsing was removed from CUPS since version 1.6.\n  Legacy CUPS Browsing is a generic security risk, see the\n  section \"Automated print queue setup via cups-browsed\" in\n  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings\n\n- CVE-2024-47076: Fixed lack of input sanitization in cfGetPrinterAttributes5 (bsc#1230937)\n\n- CVE-2024-47175: Fixed lack of input sanitization in _ppdCreateFromIPP() (bsc#1230932)\n\n- In general regarding CUPS and cups-browsed security issues see\n  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-packagehub-589",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21850-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1230932",
        "url": "https://bugzilla.suse.com/1230932"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1230937",
        "url": "https://bugzilla.suse.com/1230937"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1230939",
        "url": "https://bugzilla.suse.com/1230939"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1231294",
        "url": "https://bugzilla.suse.com/1231294"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1253678",
        "url": "https://bugzilla.suse.com/1253678"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1256868",
        "url": "https://bugzilla.suse.com/1256868"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1256977",
        "url": "https://bugzilla.suse.com/1256977"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273145",
        "url": "https://bugzilla.suse.com/1273145"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273146",
        "url": "https://bugzilla.suse.com/1273146"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-47076 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-47076/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-47175 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-47175/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-47176 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-47176/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-47850 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-47850/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64611 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64611/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64612 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64612/"
      }
    ],
    "title": "Security update for cups-filters",
    "tracking": {
      "current_release_date": "2026-09-15T16:13:55Z",
      "generator": {
        "date": "2026-09-14T13:25:38Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:21850-1",
      "initial_release_date": "2026-09-14T13:25:38Z",
      "revision_history": [
        {
          "date": "2026-09-14T13:25:38Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-15T16:13:55Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cups-filters-1.28.17-bp160.2.1.aarch64",
                "product": {
                  "name": "cups-filters-1.28.17-bp160.2.1.aarch64",
                  "product_id": "cups-filters-1.28.17-bp160.2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
                "product": {
                  "name": "cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
                  "product_id": "cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-filters-devel-1.28.17-bp160.2.1.aarch64",
                "product": {
                  "name": "cups-filters-devel-1.28.17-bp160.2.1.aarch64",
                  "product_id": "cups-filters-devel-1.28.17-bp160.2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cups-filters-1.28.17-bp160.2.1.ppc64le",
                "product": {
                  "name": "cups-filters-1.28.17-bp160.2.1.ppc64le",
                  "product_id": "cups-filters-1.28.17-bp160.2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
                "product": {
                  "name": "cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
                  "product_id": "cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
                "product": {
                  "name": "cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
                  "product_id": "cups-filters-devel-1.28.17-bp160.2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cups-filters-1.28.17-bp160.2.1.s390x",
                "product": {
                  "name": "cups-filters-1.28.17-bp160.2.1.s390x",
                  "product_id": "cups-filters-1.28.17-bp160.2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
                "product": {
                  "name": "cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
                  "product_id": "cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "cups-filters-devel-1.28.17-bp160.2.1.s390x",
                "product": {
                  "name": "cups-filters-devel-1.28.17-bp160.2.1.s390x",
                  "product_id": "cups-filters-devel-1.28.17-bp160.2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cups-filters-1.28.17-bp160.2.1.x86_64",
                "product": {
                  "name": "cups-filters-1.28.17-bp160.2.1.x86_64",
                  "product_id": "cups-filters-1.28.17-bp160.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
                "product": {
                  "name": "cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
                  "product_id": "cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "cups-filters-devel-1.28.17-bp160.2.1.x86_64",
                "product": {
                  "name": "cups-filters-devel-1.28.17-bp160.2.1.x86_64",
                  "product_id": "cups-filters-devel-1.28.17-bp160.2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-filters-1.28.17-bp160.2.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64"
        },
        "product_reference": "cups-filters-1.28.17-bp160.2.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-filters-1.28.17-bp160.2.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le"
        },
        "product_reference": "cups-filters-1.28.17-bp160.2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-filters-1.28.17-bp160.2.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x"
        },
        "product_reference": "cups-filters-1.28.17-bp160.2.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-filters-1.28.17-bp160.2.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64"
        },
        "product_reference": "cups-filters-1.28.17-bp160.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64"
        },
        "product_reference": "cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le"
        },
        "product_reference": "cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x"
        },
        "product_reference": "cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64"
        },
        "product_reference": "cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-filters-devel-1.28.17-bp160.2.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64"
        },
        "product_reference": "cups-filters-devel-1.28.17-bp160.2.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-filters-devel-1.28.17-bp160.2.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le"
        },
        "product_reference": "cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-filters-devel-1.28.17-bp160.2.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x"
        },
        "product_reference": "cups-filters-devel-1.28.17-bp160.2.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cups-filters-devel-1.28.17-bp160.2.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
        },
        "product_reference": "cups-filters-devel-1.28.17-bp160.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-47076",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-47076"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-47076",
          "url": "https://www.suse.com/security/cve/CVE-2024-47076"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230932 for CVE-2024-47076",
          "url": "https://bugzilla.suse.com/1230932"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230937 for CVE-2024-47076",
          "url": "https://bugzilla.suse.com/1230937"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265889 for CVE-2024-47076",
          "url": "https://bugzilla.suse.com/1265889"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-14T13:25:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-47076"
    },
    {
      "cve": "CVE-2024-47175",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-47175"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-47175",
          "url": "https://www.suse.com/security/cve/CVE-2024-47175"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230932 for CVE-2024-47175",
          "url": "https://bugzilla.suse.com/1230932"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1256977 for CVE-2024-47175",
          "url": "https://bugzilla.suse.com/1256977"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265885 for CVE-2024-47175",
          "url": "https://bugzilla.suse.com/1265885"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-14T13:25:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-47175"
    },
    {
      "cve": "CVE-2024-47176",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-47176"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-47176",
          "url": "https://www.suse.com/security/cve/CVE-2024-47176"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230932 for CVE-2024-47176",
          "url": "https://bugzilla.suse.com/1230932"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230939 for CVE-2024-47176",
          "url": "https://bugzilla.suse.com/1230939"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1249128 for CVE-2024-47176",
          "url": "https://bugzilla.suse.com/1249128"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-14T13:25:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-47176"
    },
    {
      "cve": "CVE-2024-47850",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-47850"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS amplification attacks.)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-47850",
          "url": "https://www.suse.com/security/cve/CVE-2024-47850"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231294 for CVE-2024-47850",
          "url": "https://bugzilla.suse.com/1231294"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-14T13:25:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-47850"
    },
    {
      "cve": "CVE-2026-64611",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64611"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially crafted printer advertisement, leading to denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64611",
          "url": "https://www.suse.com/security/cve/CVE-2026-64611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273145 for CVE-2026-64611",
          "url": "https://bugzilla.suse.com/1273145"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-14T13:25:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64611"
    },
    {
      "cve": "CVE-2026-64612",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64612"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
          "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64612",
          "url": "https://www.suse.com/security/cve/CVE-2026-64612"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273146 for CVE-2026-64612",
          "url": "https://bugzilla.suse.com/1273146"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-cups-browsed-1.28.17-bp160.2.1.x86_64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.aarch64",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.ppc64le",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.s390x",
            "openSUSE Leap 16.0:cups-filters-devel-1.28.17-bp160.2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-14T13:25:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64612"
    }
  ]
}

CVE-2024-47076 (GCVE-0-2024-47076)

Vulnerability from cvelistv5 – Published: 2024-09-26 21:18 – Updated: 2025-11-03 22:19

Title

libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server

Summary

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.

Severity

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-27 00:00 UTC

CWE

CWE-20 - Improper Input Validation

Assigner

GitHub_M mitre root

References

9 references

URL	Tags
https://github.com/OpenPrinting/libcupsfilters/se…	x_refsource_CONFIRM
https://github.com/OpenPrinting/cups-browsed/secu…	x_refsource_MISC
https://github.com/OpenPrinting/cups-filters/secu…	x_refsource_MISC
https://github.com/OpenPrinting/libppd/security/a…	x_refsource_MISC
https://www.cups.org	x_refsource_MISC
https://www.evilsocket.net/2024/09/26/Attacking-U…	x_refsource_MISC
https://github.com/OpenPrinting/libcupsfilters/co…
https://security.netapp.com/advisory/ntap-2024101…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
OpenPrinting	libcupsfilters	Affected: <= 2.1b1
openprinting	libcupsfilters	Affected: 0 , ≤ 2.1b1 (custom) cpe:2.3:a:openprinting:libcupsfilters::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:openprinting:libcupsfilters:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "libcupsfilters",
            "vendor": "openprinting",
            "versions": [
              {
                "lessThanOrEqual": "2.1b1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47076",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-27T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-28T03:55:45.705Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:19:59.403Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://github.com/OpenPrinting/libcupsfilters/commit/95576ec3d20c109332d14672a807353cdc551018"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241011-0001/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00048.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "libcupsfilters",
          "vendor": "OpenPrinting",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 2.1b1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-26T22:01:09.793Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5"
        },
        {
          "name": "https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8"
        },
        {
          "name": "https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47"
        },
        {
          "name": "https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6"
        },
        {
          "name": "https://www.cups.org",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.cups.org"
        },
        {
          "name": "https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I"
        }
      ],
      "source": {
        "advisory": "GHSA-w63j-6g73-wmg5",
        "discovery": "UNKNOWN"
      },
      "title": "libcupsfilters\u0027s cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47076",
    "datePublished": "2024-09-26T21:18:22.067Z",
    "dateReserved": "2024-09-17T17:42:37.030Z",
    "dateUpdated": "2025-11-03T22:19:59.403Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47175 (GCVE-0-2024-47175)

Vulnerability from cvelistv5 – Published: 2024-09-26 21:18 – Updated: 2025-11-03 22:20

Title

libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer

Summary

CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.

Severity

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-27 14:43 UTC

CWE

CWE-20 - Improper Input Validation

Assigner

GitHub_M mitre root

References

11 references

URL	Tags
https://github.com/OpenPrinting/libppd/security/a…	x_refsource_CONFIRM
https://github.com/OpenPrinting/cups-browsed/secu…	x_refsource_MISC
https://github.com/OpenPrinting/cups-filters/secu…	x_refsource_MISC
https://github.com/OpenPrinting/libcupsfilters/se…	x_refsource_MISC
https://www.cups.org	x_refsource_MISC
https://www.evilsocket.net/2024/09/26/Attacking-U…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2024/09/27/3
https://github.com/OpenPrinting/libppd/commit/d68…
https://lists.debian.org/debian-lts-announce/2024…
https://security.netapp.com/advisory/ntap-2024101…
https://psirt.global.sonicwall.com/vuln-detail/SN…

Impacted products

2 products

Vendor	Product	Version
OpenPrinting	libppd	Affected: <= 2.1b1
openprinting	libppd	Affected: 0 , ≤ 2.1b1 (custom) cpe:2.3:a:openprinting:libppd::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:20:02.661Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2024/09/27/3"
          },
          {
            "url": "https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00047.html"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241011-0001/"
          },
          {
            "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0016"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:openprinting:libppd:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "libppd",
            "vendor": "openprinting",
            "versions": [
              {
                "lessThanOrEqual": "2.1b1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47175",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-27T14:43:04.963185Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-27T14:43:16.814Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "libppd",
          "vendor": "OpenPrinting",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 2.1b1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-26T21:18:25.265Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6"
        },
        {
          "name": "https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8"
        },
        {
          "name": "https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47"
        },
        {
          "name": "https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5"
        },
        {
          "name": "https://www.cups.org",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.cups.org"
        },
        {
          "name": "https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I"
        }
      ],
      "source": {
        "advisory": "GHSA-7xfx-47qg-grp6",
        "discovery": "UNKNOWN"
      },
      "title": "libppd\u0027s ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47175",
    "datePublished": "2024-09-26T21:18:25.265Z",
    "dateReserved": "2024-09-19T22:32:11.962Z",
    "dateUpdated": "2025-11-03T22:20:02.661Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47176 (GCVE-0-2024-47176)

Vulnerability from cvelistv5 – Published: 2024-09-26 21:13 – Updated: 2025-11-04 21:08

Title

cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source

Summary

CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-27 18:10 UTC

CWE

CWE-1327 - Binding to an Unrestricted IP Address

Assigner

GitHub_M mitre root

References

12 references

URL	Tags
https://github.com/OpenPrinting/cups-browsed/secu…	x_refsource_CONFIRM
https://github.com/OpenPrinting/cups-filters/secu…	x_refsource_MISC
https://github.com/OpenPrinting/libcupsfilters/se…	x_refsource_MISC
https://github.com/OpenPrinting/libppd/security/a…	x_refsource_MISC
https://github.com/OpenPrinting/cups-browsed/blob…	x_refsource_MISC
https://www.cups.org	x_refsource_MISC
https://www.evilsocket.net/2024/09/26/Attacking-U…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2024/09/27/6
https://github.com/OpenPrinting/cups-browsed/comm…
https://security.netapp.com/advisory/ntap-2024101…
https://lists.debian.org/debian-lts-announce/2024…
http://www.openwall.com/lists/oss-security/2025/09/11/2

Impacted products

2 products

Vendor	Product	Version
OpenPrinting	cups-browsed	Affected: <= 2.0.1
openprinting	cups	Affected: 2.0.1 cpe:2.3:a:openprinting:cups::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:08:56.576Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2024/09/27/6"
          },
          {
            "url": "https://github.com/OpenPrinting/cups-browsed/commit/1debe6b140c37e0aa928559add4abcc95ce54aa2"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241011-0001/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00048.html"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/09/11/2"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "cups",
            "vendor": "openprinting",
            "versions": [
              {
                "status": "affected",
                "version": "2.0.1"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47176",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-27T18:10:15.456578Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-27T18:13:04.491Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "cups-browsed",
          "vendor": "OpenPrinting",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 2.0.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1327",
              "description": "CWE-1327: Binding to an Unrestricted IP Address",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-02T19:16:51.368Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8"
        },
        {
          "name": "https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47"
        },
        {
          "name": "https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5"
        },
        {
          "name": "https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6"
        },
        {
          "name": "https://github.com/OpenPrinting/cups-browsed/blob/master/daemon/cups-browsed.c#L13992",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenPrinting/cups-browsed/blob/master/daemon/cups-browsed.c#L13992"
        },
        {
          "name": "https://www.cups.org",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.cups.org"
        },
        {
          "name": "https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I"
        }
      ],
      "source": {
        "advisory": "GHSA-rj88-6mr5-rcw8",
        "discovery": "UNKNOWN"
      },
      "title": "cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47176",
    "datePublished": "2024-09-26T21:13:05.913Z",
    "dateReserved": "2024-09-19T22:32:11.962Z",
    "dateUpdated": "2025-11-04T21:08:56.576Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47850 (GCVE-0-2024-47850)

Vulnerability from cvelistv5 – Published: 2024-10-04 00:00 – Updated: 2024-10-11 22:03

Summary

CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS amplification attacks.)

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-04 14:56 UTC

CWE

n/a
CWE-400 - Uncontrolled Resource Consumption

Assigner

mitre mitre root

References

5 references

URL	Tags
https://github.com/OpenPrinting/cups
https://www.akamai.com/blog/security-research/oct…
https://github.com/OpenPrinting/cups-filters/secu…
http://www.openwall.com/lists/oss-security/2024/10/04/1
https://security.netapp.com/advisory/ntap-2024101…

Impacted products

1 product

Vendor	Product	Version
cups	cups	Affected: 1.0 , < 2.5b1 (custom) cpe:2.3:a:cups:cups:1.0:-::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:cups:cups:1.0:-:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "cups",
            "vendor": "cups",
            "versions": [
              {
                "lessThan": "2.5b1",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-47850",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T14:56:25.521418Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T14:59:31.154Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-10-11T22:03:17.443Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2024/10/04/1"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241011-0002/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS amplification attacks.)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-07T16:05:42.469Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/OpenPrinting/cups"
        },
        {
          "url": "https://www.akamai.com/blog/security-research/october-cups-ddos-threat"
        },
        {
          "url": "https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq86-c7g6-r2h8"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-47850",
    "datePublished": "2024-10-04T00:00:00.000Z",
    "dateReserved": "2024-10-04T00:00:00.000Z",
    "dateUpdated": "2024-10-11T22:03:17.443Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-64611 (GCVE-0-2026-64611)

Vulnerability from cvelistv5 – Published: 2026-07-23 10:46 – Updated: 2026-08-19 13:34

Title

Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel()

Summary

A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially crafted printer advertisement, leading to denial of service.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-23 20:07 UTC

CWE

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Assigner

redhat redhat root

References

4 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:56965	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-64611	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2502799	issue-trackingx_refsource_REDHAT
https://github.com/OpenPrinting/libcupsfilters/se…

Impacted products

5 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 1:2.0.0-13.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2026-06-14 08:37

Credits

Red Hat would like to thank Michalis Vasileiadis for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-64611",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T20:07:10.793765Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T20:15:01.235Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "libcupsfilters",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1:2.0.0-13.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "cups-filters",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "cups-filters",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "cups-filters",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unaffected",
          "packageName": "cups-filters",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Michalis Vasileiadis for reporting this issue."
        }
      ],
      "datePublic": "2026-06-14T08:37:48.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially crafted printer advertisement, leading to denial of service."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-835",
              "description": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T13:34:51.083Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:56965",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:56965"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-64611"
        },
        {
          "name": "RHBZ#2502799",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502799"
        },
        {
          "url": "https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-rcq7-rv5g-j3r4"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-06-14T08:37:48.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-06-14T08:37:48.000Z",
          "value": "Made public."
        }
      ],
      "title": "Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel()",
      "workarounds": [
        {
          "lang": "en",
          "value": "If automatic network printer discovery is not strictly necessary for your environment, stopping the service completely eliminates the vulnerable attack surface.If you must use cups-browsed for legitimate operational reasons, you should prevent untrusted networks from feeding data to the daemon."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-64611",
    "datePublished": "2026-07-23T10:46:49.957Z",
    "dateReserved": "2026-07-20T11:15:34.675Z",
    "dateUpdated": "2026-08-19T13:34:51.083Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-64612 (GCVE-0-2026-64612)

Vulnerability from cvelistv5 – Published: 2026-07-20 17:33 – Updated: 2026-08-24 09:42

Title

Libcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malformed png

Summary

A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-20 18:21 UTC

CWE

CWE-248 - Uncaught Exception

Assigner

redhat redhat root

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:56965	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57451	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:58560	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-64612	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2502801	issue-trackingx_refsource_REDHAT
https://github.com/OpenPrinting/libcupsfilters/se…

Impacted products

5 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 1:2.0.0-13.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.20.0-36.el8_10.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.28.7-27.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7

Date Public

2026-06-14 08:37

Credits

Red Hat would like to thank Michalis Vasileiadis for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-64612",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-20T18:21:35.294347Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-20T18:36:33.601Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "libcupsfilters",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1:2.0.0-13.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "cups-filters",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.0-36.el8_10.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "cups-filters",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.28.7-27.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "cups-filters",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "cups-filters",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Michalis Vasileiadis for reporting this issue."
        }
      ],
      "datePublic": "2026-06-14T08:37:48.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-24T09:42:51.999Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:56965",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:56965"
        },
        {
          "name": "RHSA-2026:57451",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:57451"
        },
        {
          "name": "RHSA-2026:58560",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:58560"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-64612"
        },
        {
          "name": "RHBZ#2502801",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502801"
        },
        {
          "url": "https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-7mxj-cfq5-84ch"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-06-14T08:37:48.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-06-14T08:37:48.000Z",
          "value": "Made public."
        }
      ],
      "title": "Libcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malformed png",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-248: Uncaught Exception"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-64612",
    "datePublished": "2026-07-20T17:33:01.878Z",
    "dateReserved": "2026-07-20T11:15:34.675Z",
    "dateUpdated": "2026-08-24T09:42:51.999Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2026:21850-1

CVE-2024-47076 (GCVE-0-2024-47076)

CVE-2024-47175 (GCVE-0-2024-47175)

CVE-2024-47176 (GCVE-0-2024-47176)

CVE-2024-47850 (GCVE-0-2024-47850)

CVE-2026-64611 (GCVE-0-2026-64611)

CVE-2026-64612 (GCVE-0-2026-64612)

Tags

Sightings

Nomenclature

Related by attack behaviour