Critical Remote Command Injection Vulnerability in CUPS Package
Summary
ALSA-2024:9470: Low: cups security update. Affects cups versions < 1:2.3.3op2-31.el9_5. Fixed in 1:2.3.3op2-31.el9_5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Common UNIX Printing System (CUPS) is a widely used printing system for UNIX-like operating systems, including Linux. It provides a portable printing layer that allows users to manage print jobs and queues. CUPS supports various printing protocols and is essential for enabling printing capabilities in many applications. However, a recent vulnerability has been identified that could allow an attacker to exploit CUPS through maliciously crafted PPD files.
Vulnerability Detail
The vulnerability arises from a remote command injection flaw in the CUPS package, specifically in the libppd component. An attacker can exploit this vulnerability by sending specially crafted data in a PPD file, which could lead to arbitrary command execution on the affected system. This poses a significant risk as it could allow unauthorized access to sensitive data or control over the system, potentially leading to further exploitation.
How To Fix
Minimum fixed version
1:2.3.3op2-31.el9_5
This is the first release that contains the fix.
sudo dnf update cupsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the CUPS service by configuring your firewall to block incoming connections or by disabling the CUPS service until the package is updated. You can disable the CUPS service with the following command:
sudo systemctl stop cups
sudo systemctl disable cups
Conclusion
The CUPS package has a critical vulnerability that allows remote command injection through malicious PPD files. It is crucial to update to the patched version to mitigate the risk. Users should also consider temporary workarounds while preparing for the update.
See every vulnerability recorded for cups →
FAQ
The vulnerability allows remote command injection, which can lead to unauthorized access and control over the affected system.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, the patched version of the CUPS package is 1:2.3.3op2-31.el9_5. Updating to this version will resolve the vulnerability.
If immediate updating is not possible, consider disabling the CUPS service or restricting access to it as a temporary measure.
For more details, refer to the CVE page linked in the advisory or check the official CUPS documentation.
Related vulnerabilities
Recent vulnerabilities recorded for cups.
