Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2024-47076

CVSS 8.6 5 detections found
View on NVD →
CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.

Detection rules

Source Rule Status Updated
elastic Network Connection by Cups or Foomatic-rip Child production 2026-09-18
elastic File Creation by Cups or Foomatic-rip Child production 2026-09-18
elastic Printer User (lp) Shell Execution production 2026-09-18
elastic Cupsd or Foomatic-rip Shell Execution production 2026-09-18
elastic Suspicious Execution from Foomatic-rip or Cupsd Parent production 2026-09-18