Skip to content

cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server

Low
zdohnal published GHSA-w63j-6g73-wmg5 Sep 26, 2024

Package

libcupsfilters

Affected versions

<= 2.1b1

Patched versions

None

Description

Summary

cfGetPrinterAttributes5 does not sanitize IPP attributes returned from an IPP server

Details

cfGetPrinterAttributes5 does not sanitize IPP attributes returned from an IPP server, and when those attributes are used, for instance, to generate a PPD file, this leads to user controlled values.

PoC

This bug is part of an exploit chain leading to RCE described here.

Severity

Low

CVE ID

CVE-2024-47076

Weaknesses

No CWEs

Credits