Under certain conditions, attackers can chain vulnerabilities in multiple components of the CUPS printing system to execute arbitrary code remotely on Linux machines, but the service is usually not enabled by default, mitigating the risk.
- CVE-2024-47076 (libcupsfilters)
- CVE-2024-47175 (libppd),
- CVE-2024-47176 (cups-browsed)
- CVE-2024-47177 (cups-filters)
"discovered by Simone Margaritelli, these security flaws don't affect systems in their default configuration."