CVE catalog

CVE-2024-47850

cups-filters: CVE-2024-47850

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.85% · Oct 25, 2026

CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS amplification attacks.)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiancups-filterssid1.28.17-7vulnerable
Debiancups-filtersforky1.28.17-7vulnerable
Debiancups-filterstrixie1.28.17-6+deb13u1vulnerable
Debiancups-filtersbookworm1.28.17-3+deb12u2vulnerable
Debiancups-filtersbookworm-security1.28.17-3+deb12u1vulnerable
Ubuntucups-filterspro1.17.9-0ubuntu1vulnerable
Ubuntucups-filterspro1.17.9-1vulnerable
Ubuntucups-filterspro1.20.0-2vulnerable
Ubuntucups-filterspro1.20.1-1vulnerable
Ubuntucups-filterspro1.20.1-1build1vulnerable
Ubuntucups-filterspro1.20.2-0ubuntu1vulnerable
Ubuntucups-filterspro1.20.2-0ubuntu2vulnerable
Ubuntucups-filterspro1.20.2-0ubuntu3vulnerable
Ubuntucups-filterspro1.20.2-0ubuntu3.1vulnerable
Ubuntucups-filterspro1.20.2-0ubuntu3.3vulnerable
Ubuntucups-filterspro1.20.2-0ubuntu3.3+esm1fixed
Ubuntucups-filters20.041.25.11-0ubuntu1vulnerable
Ubuntucups-filters20.041.25.11-1vulnerable
Ubuntucups-filters20.041.25.12-1vulnerable
Ubuntucups-filters20.041.25.13-1vulnerable
Ubuntucups-filters20.041.26.0-1vulnerable
Ubuntucups-filters20.041.26.1-1vulnerable
Ubuntucups-filters20.041.26.2-1vulnerable
Ubuntucups-filters20.041.27.0-1vulnerable
Ubuntucups-filters20.041.27.0-2vulnerable
Ubuntucups-filters20.041.27.1-1vulnerable
Ubuntucups-filters20.041.27.1-2vulnerable
Ubuntucups-filters20.041.27.1-3vulnerable
Ubuntucups-filters20.041.27.2-1vulnerable
Ubuntucups-filters20.041.27.3-1vulnerable
Ubuntucups-filters20.041.27.4-1vulnerable
Ubuntucups-filters20.041.27.4-1ubuntu0.2vulnerable
Ubuntucups-filters20.041.27.4-1ubuntu0.3fixed
Ubuntucups-filters22.041.28.10-2vulnerable
Ubuntucups-filters22.041.28.11-1vulnerable
Ubuntucups-filters22.041.28.11-2vulnerable
Ubuntucups-filters22.041.28.12-1vulnerable
Ubuntucups-filters22.041.28.13-0ubuntu1vulnerable
Ubuntucups-filters22.041.28.14-1vulnerable
Ubuntucups-filters22.041.28.15-0ubuntu1vulnerable
Ubuntucups-filters22.041.28.15-0ubuntu1.2vulnerable
Ubuntucups-filters22.041.28.15-0ubuntu1.3fixed
Ubuntucups-browsed24.042.0.0-0ubuntu2vulnerable
Ubuntucups-browsed24.042.0.0-0ubuntu3vulnerable
Ubuntucups-browsed24.042.0.0-0ubuntu9vulnerable
Ubuntucups-browsed24.042.0.0-0ubuntu10vulnerable
Ubuntucups-browsed24.042.0.0-0ubuntu10.1fixed
Susecups-filterslinux enterprise server 12 sp5-ltss1.0.58-19.32.1fixed
Susecups-filterslinux enterprise server ltss extended security 12 sp51.0.58-19.32.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiancups-filterssourcesid(unfixed)not yet assignedNot reported[1088992]
Debiancups-filterssourceforky(unfixed)not yet assignedNot reported[1088992]
Debiancups-filterssourcetrixie(unfixed)not yet assignedNot reported[1088992]
Debiancups-filterssourcebookworm(unfixed)not yet assignedNot reported[1088992]
Ubuntucups-filtersdebpro1.20.2-0ubuntu3.3+esm1Not reportedUBUNTU-CVE-2024-47850Not reported
Ubuntucups-filtersdeb20.041.27.4-1ubuntu0.3Not reportedUBUNTU-CVE-2024-47850Not reported
Ubuntucups-filtersdeb22.041.28.15-0ubuntu1.3Not reportedUBUNTU-CVE-2024-47850Not reported
Ubuntucups-browseddeb24.042.0.0-0ubuntu10.1Not reportedUBUNTU-CVE-2024-47850Not reported
Susecups-filtersrpmlinux enterprise server 12 sp5-ltss1.0.58-19.32.1Not reportedSUSE-SU-2024:3756-1Not reported
Susecups-filtersrpmlinux enterprise server ltss extended security 12 sp51.0.58-19.32.1Not reportedSUSE-SU-2024:3756-1Not reported

[Debian bug #1088992]

Notes

[trixie] cups-filters: Mitigated with fixes around CVE-2024-47076, CVE-2024-47175 and CVE-2024-47176 [bookworm] cups-filters: Mitigated with fixes around CVE-2024-47076, CVE-2024-47175 and CVE-2024-47176

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [cups-browsed]Affected

    Source package: [cups-filters]

    Details (4)

    • 1.28.17-3+deb12u2 · amd64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u2 · arm64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

  • [cups-filters]Affected
    Details (4)

    • 1.28.17-3+deb12u2 · amd64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u2 · arm64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

  • [cups-filters-core-drivers]Affected

    Source package: [cups-filters]

    Details (4)

    • 1.28.17-3+deb12u2 · amd64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u2 · arm64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

  • [libcupsfilters1]Affected

    Source package: [cups-filters]

    Details (4)

    • 1.28.17-3+deb12u2 · amd64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u2 · arm64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

  • [libcupsfilters-dev]Affected

    Source package: [cups-filters]

    Details (4)

    • 1.28.17-3+deb12u2 · amd64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u2 · arm64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

  • [libfontembed1]Affected

    Source package: [cups-filters]

    Details (4)

    • 1.28.17-3+deb12u2 · amd64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u2 · arm64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

  • [libfontembed-dev]Affected

    Source package: [cups-filters]

    Details (4)

    • 1.28.17-3+deb12u2 · amd64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u2 · arm64 · bookworm

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

    • 1.28.17-3+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · cups-filters · debian · bookworm; dsa · cups-filters · debian · 12

[Debian 13 (Trixie)]

  • [cups-browsed]Affected

    Source package: [cups-filters]

    Details (2)

    • 1.28.17-6+deb13u1 · amd64 · trixie

      Affected

      dsa · cups-filters · debian · 13

    • 1.28.17-6+deb13u1 · arm64 · trixie

      Affected

      dsa · cups-filters · debian · 13

  • [cups-filters]Affected
    Details (2)

    • 1.28.17-6+deb13u1 · amd64 · trixie

      Affected

      dsa · cups-filters · debian · 13

    • 1.28.17-6+deb13u1 · arm64 · trixie

      Affected

      dsa · cups-filters · debian · 13

  • [cups-filters-core-drivers]Affected

    Source package: [cups-filters]

    Details (2)

    • 1.28.17-6+deb13u1 · amd64 · trixie

      Affected

      dsa · cups-filters · debian · 13

    • 1.28.17-6+deb13u1 · arm64 · trixie

      Affected

      dsa · cups-filters · debian · 13

  • [libcupsfilters1t64]Affected

    Source package: [cups-filters]

    Details (2)

    • 1.28.17-6+deb13u1 · amd64 · trixie

      Affected

      dsa · cups-filters · debian · 13

    • 1.28.17-6+deb13u1 · arm64 · trixie

      Affected

      dsa · cups-filters · debian · 13

  • [libcupsfilters-dev]Affected

    Source package: [cups-filters]

    Details (2)

    • 1.28.17-6+deb13u1 · amd64 · trixie

      Affected

      dsa · cups-filters · debian · 13

    • 1.28.17-6+deb13u1 · arm64 · trixie

      Affected

      dsa · cups-filters · debian · 13

  • [libfontembed1t64]Affected

    Source package: [cups-filters]

    Details (2)

    • 1.28.17-6+deb13u1 · amd64 · trixie

      Affected

      dsa · cups-filters · debian · 13

    • 1.28.17-6+deb13u1 · arm64 · trixie

      Affected

      dsa · cups-filters · debian · 13

  • [libfontembed-dev]Affected

    Source package: [cups-filters]

    Details (2)

    • 1.28.17-6+deb13u1 · amd64 · trixie

      Affected

      dsa · cups-filters · debian · 13

    • 1.28.17-6+deb13u1 · arm64 · trixie

      Affected

      dsa · cups-filters · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]