Rapid7 Vulnerability & Exploit Database

Ubuntu: (Multiple Advisories) (CVE-2024-47175): CUPS vulnerability

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to 搜索

Ubuntu: (Multiple Advisories) (CVE-2024-47175): CUPS vulnerability

严重程度
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:C/A:N)
发表
09/26/2024
创建
09/28/2024
添加
09/27/2024
修改
10/08/2024

描述

CUPS is a st和ards-based, open-source printing system, 和 `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input 和 ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.

解决方案(年代)

  • ubuntu-upgrade-cups
  • ubuntu-upgrade-libppd-utils
  • ubuntu-upgrade-libppd2

参考文献

insightVM

Advanced vulnerability management analytics 和 reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, 和 what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value 和 insight.

– Scott Cheney, 经理 of Information Security, Sierra View Medical Center

;