[MàJ] Vulnérabilités affectant OpenPrinting CUPS (27 septembre 2024)

unknownCVE-2024-47176 CVE-2024-47076 CVE-2024-47175 CVE-2024-47177

[Mise à jour du 10 octobre 2024] Le 28 septembre 2024, Elastic Security Labs a publié des règles de détection au format propriétaire de l'éditeur (cf. section Documentation), qui sont confirmées par les analyses du CERT-FR pour la détection des attaques connues. [Publication initiale] De...

CSIRTS triage

vendor: OpenPrinting product: CUPSOther

What: Multiple vulnerabilities have been identified in OpenPrinting CUPS.
Who is affected: Deployments of OpenPrinting CUPS are affected.
Urgency: Remediation is urgent due to the potential impact of the vulnerabilities.
Action: Review and apply necessary updates to OpenPrinting CUPS.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CUPS

Get an email when a new CUPS advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Alertes de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2024-09-27
Exploitation: Not in CISA KEV at last sync

Original advisory: https://www.cert.ssi.gouv.fr/alerte/CERTFR-2024-ALE-012/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Exploitation likely imminentCVE-2024-47176EPSS puts this in the most-targeted tier (50.6% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 99% of all EPSS-scored CVEs.
Exploitation likely imminentCVE-2024-47076EPSS puts this in the most-targeted tier (77.6% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 99.5% of all EPSS-scored CVEs.
Exploitation likely imminentCVE-2024-47175EPSS puts this in the most-targeted tier (63.6% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 99.2% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2024-47176	coverage & exploitation status	NVD · CVE.org
CVE-2024-47076	coverage & exploitation status	NVD · CVE.org
CVE-2024-47175	coverage & exploitation status	NVD · CVE.org
CVE-2024-47177	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

medium[UPDATE] [medium] Xerox FreeFlow Print Server: Multiple vulnerabilities allow unspecified attackcert-bund