CVE-2024-47850

Katalog CVE

CVSS 7.5 · High EPSS 0,85%

Kerentanan Uncontrolled Resource Consumption. Skor CVSS 3.1 7.5 (High) menurut CISA ADP.

Deskripsi (NVD)

CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS amplification attacks.)

Rincian

Terbit di NVD

4 Oktober 2024

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

7.5 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

0,85% peluang dieksploitasi; lebih tinggi dari 57,1% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/OpenPrinting/cups
• https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq86-c7g6-r2h8
• https://www.akamai.com/blog/security-research/october-cups-ddos-threat
• http://www.openwall.com/lists/oss-security/2024/10/04/1
• https://security.netapp.com/advisory/ntap-20241011-0002/