Multiple Vulnerabilities Disclosed in Linux-based CUPS Printing Service

arcticwolf.com

Multiple Vulnerabilities Disclosed in Linux-based CUPS Printing Service - 2d

The Common UNIX Printing System (CUPS) is an open-source printing system which allows for managing printers and print jobs across local and networked environments in Unix-like operating systems including Linux and MacOS. Several vulnerabilities were found in CUPS which affect GNU/Linux distributions. These vulnerabilities have been identified as CVE-2024-47176, CVE-2024-47177, CVE-2024-47178 and CVE-2024-47179, and they could allow for remote code execution on vulnerable systems. The vulnerabilities arise from issues within the CUPS-browsed and cupsd components, which handle tasks related to printer discovery and communication with printers. Attackers could potentially exploit these vulnerabilities by sending specially crafted requests to the CUPS service, leading to arbitrary code execution with the privileges of the CUPS daemon. It is highly recommended that users of affected Linux distributions update their CUPS installations to the latest patched versions to mitigate the risks associated with these vulnerabilities.

References:

arcticwolf.com - Arctic Wolf blog post about the CUPS vulnerabilities - 1d
malware.news - Malware News post about the CUPS vulnerabilities - 1d
www.scworld.com - SCWorld News post about the CUPS vulnerabilities - 1d

Classification:

HashTags: CUPS Vulnerability Linux
Company: CUPS
Target: Linux systems
Feature: CUPS-browsed
Type: Vulnerability
Severity: Major

This site is an experimental news aggregator using feeds I personally follow. You can reach me using contacts documented at my website here (https://royans.net/) if you have feedback. You can also find FlagThis at Mastodon.