CVE-2024-47850

HIGH EPSS 53.9%
Published Oct 4, 20241y ago · Modified Jun 17, 20262w ago
7.5 CVSS 3.1
High
Find Similar
Published Oct 4, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS amplification attacks.)

CVSS Details

Base Score
7.5
Exploitability
3.9
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
53.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-400 Uncontrolled Resource Consumption Resource Mgmt

References 5

  • openwall.com http://www.openwall.com/lists/oss-security/2024/10/04/1
  • github.com https://github.com/OpenPrinting/cups
  • github.com https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq86-c7g6-r2h8
  • security.netapp.com https://security.netapp.com/advisory/ntap-20241011-0002/
  • akamai.com https://www.akamai.com/blog/security-research/october-cups-ddos-threat

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.