CVE-2024-47076: CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters

Q: How do I fix CVE-2024-47076?

libcupsfilters: upgrade to newer than 2.0.0. Exact commands for each OS are on this page.

Q: Is CVE-2024-47076 being exploited?

CVE-2024-47076 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2024-47076 affect?

CVE-2024-47076 affects libcupsfilters. Severity is high (CVSS 8.6). CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applic

Q: How urgent is CVE-2024-47076?

Priority 65/100. High severity; EPSS top 1%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action

This week

HIGH 8.6REMOTEUPGRADE

CVE-2024-47076 is a high-severity flaw (CVSS 8.6) affecting libcupsfilters. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this ca

Why this priority

High severity
EPSS top 1%: very likely to be exploited
Public exploit reference
Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score	8.6 (High)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	None
User interaction	None
EPSS exploit chance	79.9% (top 1%)
CISA exploited list	No
Weakness	CWE-20
Published	2024-09-26
Last modified	2026-06-17

Publisher (CNA): GitHub, Inc. · Vendor: openprinting

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2024-09-26 22:15 UTCPublished CVE record published
2026-06-17 07:56 UTCUpdated Record last modified

openprinting libcupsfilters UPGRADE

Affected: <= 2.0.0 · 2.1 beta1

Fixed in: newer than 2.0.0

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy libcupsfilters || rpm -q libcupsfilters || libcupsfilters --version

2. UPGRADE to newer than 2.0.0 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade libcupsfilters

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade libcupsfilters

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Exact fixes by distribution

Fedora 46 · sbcl · FIXED · 2.6.10-1.fc46 · FEDORA-2026-feab1a81c6 · source

sudo dnf upgrade --advisory=FEDORA-2026-feab1a81c6

Fedora ELN · python-archspec · FIXED · 0.2.7-1.eln159 · FEDORA-2026-e2a8272db6 · source

sudo dnf upgrade --advisory=FEDORA-2026-e2a8272db6

Ubuntu 24.04 · cups-filters · NOT AFFECTED

Ubuntu 24.10 · cups-filters · NOT AFFECTED

Ubuntu 25.04 · cups-filters · NOT AFFECTED

Ubuntu 25.10 · cups-filters · NOT AFFECTED

Ubuntu 20.04 · cups-filters · FIXED · 1.27.4-1ubuntu0.4

sudo apt update && sudo apt install --only-upgrade cups-filters dpkg --compare-versions "$(dpkg-query -W -f='${Version}' cups-filters)" ge "1.27.4-1ubuntu0.4" && echo PATCHED || echo STILL-VULNERABLE

Debian 12 · cups-filters · FIXED · 1.28.17-3+deb12u1

sudo apt update && sudo apt install --only-upgrade cups-filters dpkg --compare-versions "$(dpkg-query -W -f='${Version}' cups-filters)" ge "1.28.17-3+deb12u1" && echo PATCHED || echo STILL-VULNERABLE

Debian 13 · cups-filters · FIXED · 1.28.17-5

sudo apt update && sudo apt install --only-upgrade cups-filters dpkg --compare-versions "$(dpkg-query -W -f='${Version}' cups-filters)" ge "1.28.17-5" && echo PATCHED || echo STILL-VULNERABLE

Debian 13 · libcupsfilters · FIXED · 2.0.0-3

sudo apt update && sudo apt install --only-upgrade libcupsfilters dpkg --compare-versions "$(dpkg-query -W -f='${Version}' libcupsfilters)" ge "2.0.0-3" && echo PATCHED || echo STILL-VULNERABLE

RHEL 7.7 Advanced Update Support · cups-filters · FIXED · cups-filters-1.0.35-26.el7_7.3

sudo dnf upgrade --advisory=RHSA-2024:7551 rpm -q cups-filters

RHEL 7 Extended Lifecycle Support · cups-filters · FIXED · cups-filters-1.0.35-29.el7_9.3

sudo dnf upgrade --advisory=RHSA-2024:7553 rpm -q cups-filters

RHEL 8 · cups-filters · FIXED · cups-filters-1.20.0-35.el8_10

sudo dnf upgrade --advisory=RHSA-2024:7463 rpm -q cups-filters

RHEL 8.2 Advanced Update Support · cups-filters · FIXED · cups-filters-1.20.0-19.el8_2.2

sudo dnf upgrade --advisory=RHSA-2024:7461 rpm -q cups-filters

RHEL 8.4 Advanced Mission Critical Update Support · cups-filters · FIXED · cups-filters-1.20.0-24.el8_4.2

sudo dnf upgrade --advisory=RHSA-2024:7504 rpm -q cups-filters

Amazon Linux 2023 · see advisory · FIXED · ALAS2023-2024-723 · source

sudo dnf update --advisory=ALAS2023-2024-723

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

GitHub PoC: mutkus/CVE-2024-47076 (0 stars)
Write-up: github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8
Write-up: github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47
Write-up: github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5
Metasploit: CUPS IPP Attributes LAN Remote Code Execution

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2024-47076?

libcupsfilters: upgrade to newer than 2.0.0. Exact commands for each OS are on this page.

Is CVE-2024-47076 being exploited?

CVE-2024-47076 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2024-47076 affect?

CVE-2024-47076 affects libcupsfilters. Severity is high (CVSS 8.6). CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applic

How urgent is CVE-2024-47076?

Priority 65/100. High severity; EPSS top 1%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action

Related CVEs

CVE-2025-57812 LOW 3.7 UPGRADE UPGRADE CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters
CVE-2025-64503 MEDIUM 4.0 UPGRADE UPGRADE cups-filters contains backends, filters, and other software required to get the cups printing service working

References

← Back to latest CVEs