High severity8.6NVD Advisory· Published Sep 26, 2024· Updated Jun 17, 2026

CVE-2024-47175

Description

CUPS is a standards-based, open-source printing system, and libppd can be used for legacy PPD file support. The libppd function ppdCreatePPDFromIPP2 does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as cfGetPrinterAttributes5, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Openprinting/libppd4 versions
cpe:2.3:a:openprinting:libppd:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:openprinting:libppd:*:*:*:*:*:*:*:*range: <=2.0.0
- cpe:2.3:a:openprinting:libppd:2.1:beta1*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <= 2.1b1
Debian/linux
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Openprinting/Cupsllm-fuzzy
osv-coords50 versions
pkg:rpm/almalinux/cups pkg:rpm/almalinux/cups-client pkg:rpm/almalinux/cups-devel pkg:rpm/almalinux/cups-filesystem pkg:rpm/almalinux/cups-ipptool pkg:rpm/almalinux/cups-libs pkg:rpm/almalinux/cups-lpd pkg:rpm/opensuse/cups&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cups-filters&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cups-filters&distro=openSUSE%20Tumbleweed pkg:rpm/suse/cups&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP6 pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7 pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6 pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7 pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/cups&distro=SUSE%20Manager%20Proxy%20LTS%204.3 pkg:rpm/suse/cups&distro=SUSE%20Manager%20Server%20LTS%204.3 pkg:rpm/suse/cups-filters&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/cups-filters&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/cups-filters&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/cups-filters&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/cups-filters&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/cups-filters&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/cups-filters&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/cups-filters&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/cups-filters&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/cups-filters&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/cups-filters&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/cups-filters&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/cups-filters&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/cups-filters&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/cups-filters&distro=SUSE%20Manager%20Proxy%20LTS%204.3 pkg:rpm/suse/cups-filters&distro=SUSE%20Manager%20Server%20LTS%204.3
< 1:2.2.6-62.el8_10+ 49 more
- (no CPE)range: < 1:2.2.6-62.el8_10
- (no CPE)range: < 1:2.2.6-62.el8_10
- (no CPE)range: < 1:2.2.6-62.el8_10
- (no CPE)range: < 1:2.2.6-62.el8_10
- (no CPE)range: < 1:2.2.6-62.el8_10
- (no CPE)range: < 1:2.2.6-62.el8_10
- (no CPE)range: < 1:2.2.6-62.el8_10
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.28.17-5.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1
- (no CPE)range: < 1.25.0-150200.3.22.1

Patches

Vulnerability mechanics

References

github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477nvdPatch
github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6nvdExploitVendor Advisory
www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-InvdExploitThird Party Advisory
www.openwall.com/lists/oss-security/2024/09/27/3nvdMailing List
github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8nvdNot Applicable
github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47nvdNot Applicable
github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5nvdNot Applicable
lists.debian.org/debian-lts-announce/2024/09/msg00047.htmlnvdMailing List
www.cups.orgnvdProduct
psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0016nvd
security.netapp.com/advisory/ntap-20241011-0001/nvd

News mentions

No linked articles in our index yet.

cvss	0.559
epss	0.051
exploit	0.030
kev	0.000
patch	-0.070
ransomware	0.000