CVE-2024-47850

cups-browsed: cups-filters: cups-browsed vulnerable to DDoS amplification attack

Loading…

Severity

Important

Red Hat Product Security

7.5

CVSS 3.1

Review impact separately from score.

Published · October 4, 2024

Updated · November 21, 2025

Description

A flaw was found in cups-browsed. This vulnerability allows an attacker to launch DDoS amplification attacks via an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added.

Statement

CVE-2024-47850 is resolved by the same fixes released for the related CVE-2024-47176.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

See the security bulletin for a detailed mitigation procedure.

CVSS / CWE

CVSS 3.1 · 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE not specified