{"id":938,"date":"2024-09-27T21:02:28","date_gmt":"2024-09-27T21:02:28","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/kriticne-ranjivosti-cups-sustava-common-unix-printing-system\/"},"modified":"2026-11-04T08:57:45","modified_gmt":"2026-11-04T08:57:45","slug":"kriticne-ranjivosti-cups-sustava-common-unix-printing-system","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/kriticne-ranjivosti-cups-sustava-common-unix-printing-system\/","title":{"rendered":"Kriti\u010dne ranjivosti CUPS sustava (Common UNIX Printing System)"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Otkrivene su kriti\u010dne ranjivosti CUPS sustava (Common UNIX Printing System): <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2024-47076\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2024-47076<\/a> <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2024-47175\" rel=\"noreferrer noopener\" target=\"_blank\">CVE-2024-47175<\/a> <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2024-47176\" rel=\"noreferrer noopener\" target=\"_blank\">CVE-2024-47176<\/a> <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2024-47177\" rel=\"noreferrer noopener\" target=\"_blank\">CVE-2024-47177<\/a> <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CUPS je k\u00f4d otvorenog izvora koji omogu\u0107ava printanje na Linux\/Unix i sli\u010dnim operacijskim sustavima. Navedene ranjivosti vezane su za bibiloteke CUPS sustava, te neautentificiranom napada\u010du omogu\u0107uju izvr\u0161avanje proizvoljnog k\u00f4da.  CUPS omogu\u0107ava otkrivanje i dijeljenje printera na Linux distribucijama. Napada\u010d potencijalno mo\u017ee ostvariti izvr\u0161avanje proizvoljnog (malicioznog) k\u00f4da. To mo\u017ee dovesti do curenja osjetljivih podataka. Uspje\u0161nim iskori\u0161tavanjem ranjivosti napada\u010d, na primjer, mo\u017ee zamijeniti postoje\u0107i IPP URL printera s onim malicioznim. Prilikom \"print job\" mo\u017ee se izvr\u0161iti proizvoljno izvr\u0161avanje naredbi na ra\u010dunalu. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kao mjere mitigacije navode se: <\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>onemogu\u0107avanje i uklanjanje cups-browsed servisa <\/li><li>a\u017euriranje CUPS paketa <\/li><li>blokiranje UDP prometa na portu 631. <\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Molimo provjerite da li va\u0161i sustavi koriste CUPS, te prema potrebi primjenite mjere za\u0161tite. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vi\u0161e o samim ranjivostima mo\u017eete pro\u010ditati na: <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.rapid7.com\/blog\/post\/2024\/09\/26\/etr-multiple-vulnerabilities-in-common-unix-printing-system-cups\" rel=\"noreferrer noopener\" target=\"_blank\">https:\/\/www.rapid7.com\/blog\/post\/2024\/09\/26\/etr-multiple-vulnerabilities-in-common-unix-printing-system-cups<\/a>\/ <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.tenable.com\/blog\/cve-2024-47076-cve-2024-47175-cve-2024-47176-cve-2024-47177-faq-cups-vulnerabilities\" rel=\"noreferrer noopener\" target=\"_blank\">https:\/\/www.tenable.com\/blog\/cve-2024-47076-cve-2024-47175-cve-2024-47176-cve-2024-47177-faq-cups-vulnerabilities<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kao dodatni izvor informacija dostavljemo i poveznice na blog privatnog stru\u010dnjaka za ra\u010dunalu sigurnost (koji je otkrio ranjivost) i obavijest Red Hat-a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.evilsocket.net\/2024\/09\/26\/Attacking-UNIX-systems-via-CUPS-Part-I\" rel=\"noreferrer noopener\" target=\"_blank\">https:\/\/www.evilsocket.net\/2024\/09\/26\/Attacking-UNIX-systems-via-CUPS-Part-I<\/a>\/ <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.redhat.com\/en\/blog\/red-hat-response-openprinting-cups-vulnerabilities?sc_cid=701f2000000tyBjAAI\" rel=\"noreferrer noopener\" target=\"_blank\">https:\/\/www.redhat.com\/en\/blog\/red-hat-response-openprinting-cups-vulnerabilities?sc_cid=701f2000000tyBjAAI<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Otkrivene su kriti\u010dne ranjivosti CUPS sustava (Common UNIX Printing System): CVE-2024-47076 CVE-2024-47175 CVE-2024-47176 CVE-2024-47177 CUPS je k\u00f4d otvorenog izvora koji omogu\u0107ava printanje na Linux\/Unix i sli\u010dnim operacijskim sustavima. Navedene ranjivosti vezane su za bibiloteke CUPS sustava, te neautentificiranom napada\u010du omogu\u0107uju izvr\u0161avanje proizvoljnog k\u00f4da. CUPS omogu\u0107ava otkrivanje i dijeljenje printera na Linux distribucijama. Napada\u010d potencijalno mo\u017ee [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1498,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-938","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/938","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=938"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/938\/revisions"}],"predecessor-version":[{"id":1500,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/938\/revisions\/1500"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1498"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=938"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=938"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=938"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=938"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=938"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}