The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3904 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3904-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                    Thorsten Alteholz     September 29, 2024                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : cups     Version        : 2.3.3op2-3+deb11u9     CVE ID         : CVE-2024-47175


    Simone Margaritelli reported that cups, the Common UNIX Printing System,     does not properly sanitize IPP attributes when creating PPD files, which     may result in the execution of arbitrary code.


    For Debian 11 bullseye, this problem has been fixed in version     2.3.3op2-3+deb11u9.

    We recommend that you upgrade your cups packages.

    For the detailed security status of cups please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/cups

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7506 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()

    * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP     attributes (CVE-2024-47076)

    * cups: libppd: remote command injection via attacker controlled data in PPD file ()

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7041-3 advisory.

    USN-7041-1 fixed a vulnerability in CUPS. This update provides the corresponding update for Ubuntu 16.04     LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9470 advisory.

    [1:2.3.3op2-31]
    - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 6.10.1.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1.5 advisory.

  - virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual     environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as     CVE-2024-9287. (CVE-2024-53899)

  - DHCP can add routes to a client's routing table via the classless static route option (121). VPN-based     security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical     interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic     that was expected to be protected by the VPN. (CVE-2024-3661)

  - A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can     trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs,     the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result     in leaked passwords, such as those found in /etc/shadow while performing authentications. (CVE-2024-10041)

  - A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as     hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname,     gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who     can access certain services or terminals. (CVE-2024-10963)

  - A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an     attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and     uninitialized memory and leak one byte of uninitialized stack data at a time. (CVE-2024-12085)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file     support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the     PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in     user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an     exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.(CVE-2024-47175)

Tenable has extracted the preceding description block directly from the EulerOS cups security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the cups package has been released.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0083 advisory.

    The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar     operating systems.

    Security Fix(es):

    * cups: libppd: remote command injection via attacker controlled data in PPD file (CVE-2024-47175)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7346 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()

    * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP     attributes (CVE-2024-47076)

    * cups: libppd: remote command injection via attacker controlled data in PPD file ()

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7462 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()

    * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP     attributes (CVE-2024-47076)

    * cups: libppd: remote command injection via attacker controlled data in PPD file ()

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
207907	Debian dla-3904 : cups - security update	Nessus	Debian Local Security Checks	9/29/2024	9/30/2025	critical
208031	RHEL 9 : cups-filters (RHSA-2024:7506)	Nessus	Red Hat Local Security Checks	10/2/2024	10/9/2025	critical
208229	Ubuntu 16.04 LTS : CUPS vulnerability (USN-7041-3)	Nessus	Ubuntu Local Security Checks	10/7/2024	9/30/2025	critical
211666	Oracle Linux 9 : cups (ELSA-2024-9470)	Nessus	Oracle Linux Local Security Checks	11/21/2024	9/30/2025	critical
233564	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.5)	Nessus	Misc.	3/31/2025	3/31/2025	low
212599	EulerOS 2.0 SP12 : cups (EulerOS-SA-2024-2947)	Nessus	Huawei Local Security Checks	12/12/2024	9/30/2025	critical
213448	Photon OS 4.0: Cups PHSA-2024-4.0-0726	Nessus	PhotonOS Local Security Checks	1/1/2025	9/30/2025	critical
213617	RHEL 8 : cups (RHSA-2025:0083)	Nessus	Red Hat Local Security Checks	1/9/2025	9/30/2025	critical
207876	RHEL 9 : cups-filters (RHSA-2024:7346)	Nessus	Red Hat Local Security Checks	9/27/2024	10/9/2025	critical
208002	RHEL 8 : cups-filters (RHSA-2024:7462)	Nessus	Red Hat Local Security Checks	10/1/2024	10/9/2025	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

low

critical

critical

critical

critical

critical