CVE-2024-47175
HIGHCUPS - RCE
Title source: llmDescription
CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.
Exploits (1)
metasploit
WORKING POC
NORMAL
by Simone Margaritelli, Rick de Jager, s ipp-server, , # mDNS functionality, , · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/cups_ipp_remote_code_execution.rb
Scores
CVSS v3
8.6
EPSS
0.3366
EPSS Percentile
97.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Details
CWE
CWE-20
Status
published
Products (3)
debian/debian_linux
11.0
openprinting/libppd
2.1 beta1*
openprinting/libppd
< 2.0.0
Published
Sep 26, 2024
Tracked Since
Feb 18, 2026