Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
🔥 LINUX CUPS 4-CVE RCE CHAIN: Zero-Click Root Takeover! 🖨️🐧 Single spoofed UDP packet to port 631 triggers remote root shell execution via cups-browsed & foomatic-rip. 👉 Analysis: https://sh3llc0d3.com/blog/linux-cups-4-cve-remote-code-execution-chain-how-cups-browsed-udp-631-and-foomatic-rip-enable-zero-interaction-root-compromise-cve-2024-47176-cve-2024-47076-cve-2024-47175-cve-2024-47177/ #sh3llc0d3 #shellcode #Linux #CUPS #RCE
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 11.0 | - | - |
| App | openprinting | libppd | - | - | - |
| App | openprinting | libppd | 2.1 | - | - |