Approved changes feed: RSS · Atom

cpe:2.3:a:openprinting:libcupsfilters:2.1:beta1:*:*:*:*:*:*

part: a version: 2.1 update: beta1

VendorOpenprinting (93a57ef6-4097-59be-aade-33c84577f500)
ProductLibcupsfilters (bd548d0b-c064-523f-a870-ae5daef3c8ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/ubuntu/libcupsfilters purl2cpe 2026-06-01 10:12:23.095005
pkg:github/openprinting/libcupsfilters purl2cpe 2026-06-01 10:12:23.095007
pkg:rpm/fedora/libcupsfilters purl2cpe 2026-06-01 10:12:23.095008
pkg:rpm/opensuse/libcupsfilters purl2cpe 2026-06-01 10:12:23.095009

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-47076 vulnerable 2026-06-08 06:48:11.244869 libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server
HIGH (8.6)
CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.
Published: 2024-09-26T21:18:22.067Z
Updated: 2025-11-03T22:19:59.403Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.