{
  "schema_version": "1.7.0",
  "id": "MGASA-2024-0327",
  "published": "2024-10-07T17:39:29Z",
  "modified": "2024-10-07T16:57:58Z",
  "summary": "Updated cups & cups-filters packages fix security vulnerabilities",
  "details": "The `cfGetPrinterAttributes5` function in `libcupsfilters` does not\nsanitize IPP attributes returned from an IPP server. When these IPP\nattributes are used, for instance, to generate a PPD file, this can lead\nto attacker controlled data to be provided to the rest of the CUPS\nsystem. (CVE-2024-47076)\nThe `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP\nattributes when creating the PPD buffer. When used in combination with\nother functions such as `cfGetPrinterAttributes5`, can result in user\ncontrolled input and ultimately code execution via Foomatic. This\nvulnerability can be part of an exploit chain leading to remote code\nexecution (RCE), as described in CVE-2024-47176. (CVE-2024-47175)\n`cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet\nfrom any source, and can cause the `Get-Printer-Attributes` IPP request\nto an attacker controlled URL. When combined with other vulnerabilities,\nsuch as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker\ncan execute arbitrary commands remotely on the target machine without\nauthentication when a malicious printer is printed to. (CVE-2024-47176)\nAny value passed to `FoomaticRIPCommandLine` via a PPD file will be\nexecuted as a user controlled command. When combined with other logic\nbugs as described in CVE_2024-47176, this can lead to remote command\nexecution. (CVE-2024-47177)\n",
  "upstream": [
    "CVE-2024-47076",
    "CVE-2024-47175",
    "CVE-2024-47176",
    "CVE-2024-47177"
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://advisories.mageia.org/MGASA-2024-0327.html"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.mageia.org/show_bug.cgi?id=33596"
    },
    {
      "type": "WEB",
      "url": "https://www.openwall.com/lists/oss-security/2024/09/26/5"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-7041-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-7043-1"
    }
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Mageia:9",
        "name": "cups",
        "purl": "pkg:rpm/mageia/cups?arch=source&distro=mageia-9"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.6-1.3.mga9"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    },
    {
      "package": {
        "ecosystem": "Mageia:9",
        "name": "cups-filters",
        "purl": "pkg:rpm/mageia/cups-filters?arch=source&distro=mageia-9"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.28.16-6.1.mga9"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    }
  ],
  "credits": [
    {
      "name": "Mageia",
      "type": "COORDINATOR",
      "contact": [
        "https://wiki.mageia.org/en/Packages_Security_Team"
      ]
    }
  ]
}