CVE-2024-47177
Publication date 6 October 2024
Last updated 7 January 2025
Ubuntu priority
CUPS is a standards-based, open-source printing system, and cups-filters provides backends, filters, and other software for CUPS 2.x to use on non-Mac OS systems. Any value passed to `FoomaticRIPCommandLine` via a PPD file will be executed as a user controlled command. When combined with other logic bugs as described in CVE_2024-47176, this can lead to remote command execution.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| cups-filters | 24.10 oracular | Ignored |
| 24.04 LTS noble | Ignored | |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Ignored | |
| 18.04 LTS bionic | Ignored | |
| 16.04 LTS xenial | Ignored |
Notes
mdeslaur
This CVE is mitigated by the fixes for CVE-2024-47076, CVE-2024-47175 and CVE-2024-47176. As of 2025-01-07, there are no plans by cups-filters developers to address this specific CVE. Marking as ignored.