CVE Catalog
CVE-2024-47175
MediumSummary
Vulnerability in the libppd library used by CUPS. The ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer, potentially leading to buffer overflow or other issues.
Risk Assessment
An attacker can send a crafted IPP request, causing a crash or potential code execution in the context of the CUPS process.
Recommendation
Update CUPS and libppd to the patched version. Restrict access to IPP services.
Original NVD description (English source)
CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, c