CVE-2024-47175

Critical

Advisory

Published 26 Sept 2024In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.636; 99th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 159; of 17,787 indexed, latest versions
Container images: 144; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: cups security update

Carried by container images the latest versions of 159 of 17,787 indexed charts deploy, on 144 images.

Affected package	Affected versions	Fixed in	Images
cupsdeb	2.1.3-4ubuntu0.3, 2.1.3-4ubuntu0.4, 2.1.3-4ubuntu0.7, 2.1.3-4ubuntu0.10+21 more	2.1.3-4ubuntu0.11+esm8, 2.2.7-1ubuntu2.10+esm6, 2.3.1-9ubuntu1.9, 2.3.3op2-3+deb11u9+3 more	93
cupsrpm	1:2.2.6-33.el8, 1:2.2.6-38.el8, 1:2.2.6-40.el8, 1:2.2.6-44.el8+12 more	1:2.2.6-62.el8_10, 1:2.3.3op2-31.el9_5	51

OSV records: DEBIAN-CVE-2024-47175 RHSA-2024:9470 RHSA-2025:0083 UBUNTU-CVE-2024-47175 DLA-3904-1 DSA-5779-1
Also known as: USN-7041-1, USN-7041-2, USN-7041-3

Charts affected

159 by stars

Chart

Latest

Affected images

Radar Score

thingsboardthingsboard

0.1.3

4 of 12 See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry CVE-2024-47175.

Container image	Digest	Package	Fixed in
thingsboard/tb-coap-transport :3.4.1	bd45a09d85d9	cups@2.3.3op2-3+deb11u2	2.3.3op2-3+deb11u9
thingsboard/tb-http-transport :3.4.1	a06f53c5e2da	cups@2.3.3op2-3+deb11u2	2.3.3op2-3+deb11u9
thingsboard/tb-mqtt-transport :3.4.1	030f316ce301	cups@2.3.3op2-3+deb11u2	2.3.3op2-3+deb11u9
thingsboard/tb-node :3.4.1	645f43b688f7	cups@2.3.3op2-3+deb11u2	2.3.3op2-3+deb11u9

Open the chart page →

25,202

hermestouk

0.6.0

1 of 3 See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2024-47175.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	cups@1:2.2.6-38.el8	1:2.2.6-62.el8_10

Open the chart page →

12,454

mediawikiwbstack

0.14.0

1 of 1 See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2024-47175.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	cups@2.3.3op2-3+deb11u2	2.3.3op2-3+deb11u9

Open the chart page →

2,132

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-47175.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	cups@2.3.1-9ubuntu1.1	2.3.1-9ubuntu1.9

Open the chart page →

14,420

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2024-47175.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	cups@2.3.1-9ubuntu1.1	2.3.1-9ubuntu1.9
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	cups@1:2.2.6-38.el8	1:2.2.6-62.el8_10

Open the chart page →

28,699

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-47175.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	cups@2.3.3op2-3+deb11u2	2.3.3op2-3+deb11u9

Open the chart page →

2,021

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-47175.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	cups@2.4.1op1-1ubuntu4.10	2.4.1op1-1ubuntu4.11

Open the chart page →

14,172

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-47175.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	cups@1:2.2.6-40.el8	1:2.2.6-62.el8_10

Open the chart page →

11,592

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-47175.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	cups@1:2.2.6-50.el8	1:2.2.6-62.el8_10

Open the chart page →

6,016

Container images carrying it

144 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/flaresolverr/flaresolverr :v3.3.16	088412db1051	cups@2.3.3op2-3+deb11u6	2.3.3op2-3+deb11u9	1
ghcr.io/flaresolverr/flaresolverr :v3.3.21	f104ee51e512	cups@2.3.3op2-3+deb11u6	2.3.3op2-3+deb11u9	1
ghcr.io/g0dscookie/icinga2 :2.13.5	da81246ccfc9	cups@2.3.3op2-3+deb11u2	2.3.3op2-3+deb11u9	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	cups@1:2.2.6-33.el8	1:2.2.6-62.el8_10	1
ghcr.io/jfwenisch/discord-experiencebot :latest	b52ff07f9f0c	cups@2.2.7-1ubuntu2.10	2.2.7-1ubuntu2.10+esm6	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	cups@2.3.1-9ubuntu1.1	2.3.1-9ubuntu1.9	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	cups@2.3.1-9ubuntu1.1	2.3.1-9ubuntu1.9	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	cups@2.3.1-9ubuntu1.1	2.3.1-9ubuntu1.9	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	cups@2.3.1-9ubuntu1.1	2.3.1-9ubuntu1.9	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	cups@2.3.1-9ubuntu1.1	2.3.1-9ubuntu1.9	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	cups@2.3.1-9ubuntu1.1	2.3.1-9ubuntu1.9	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	cups@2.3.1-9ubuntu1.1	2.3.1-9ubuntu1.9	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	cups@2.2.7-1ubuntu2.8	2.2.7-1ubuntu2.10+esm6	1
ghcr.io/lsst-sqre/strimzi-registry-operator :0.6.0	7e25f7048aff	cups@2.3.3op2-3+deb11u2	2.3.3op2-3+deb11u9	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	cups@2.3.1-9ubuntu1.2	2.3.1-9ubuntu1.9	1
ghcr.io/paperless-ngx/paperless-ngx :1.8.0	9bbc9a90641e	cups@2.3.3op2-3+deb11u2	2.3.3op2-3+deb11u9	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	cups@2.4.2-3+deb12u4	2.4.2-3+deb12u8	1
ghcr.io/projectnessie/nessie :0.92.1	9efe3c74d55f	cups@1:2.3.3op2-24.el9	1:2.3.3op2-31.el9_5	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	cups@2.3.1-9ubuntu1.2	2.3.1-9ubuntu1.9	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	cups@2.3.1-9ubuntu1.2	2.3.1-9ubuntu1.9	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	cups@2.4.1op1-1ubuntu4.8	2.4.1op1-1ubuntu4.11	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	cups@2.4.1op1-1ubuntu4.8	2.4.1op1-1ubuntu4.11	1
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	cups@2.3.3op2-3+deb11u2	2.3.3op2-3+deb11u9	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	cups@2.4.2-3+deb12u4	2.4.2-3+deb12u8	1
public.ecr.aws/v0r6c2e2/hive-metastore :latest	794b3bff9510	cups@1:2.3.3op2-27.el9_4	1:2.3.3op2-31.el9_5	1
quay.io/apicurio/apicurio-registry-mem :2.5.8.Final	3b036692d546	cups@1:2.2.6-54.el8_9	1:2.2.6-62.el8_10	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	cups@1:2.2.6-38.el8	1:2.2.6-62.el8_10	1
quay.io/fiware/apollo :0.0.10	55330b1b60c1	cups@1:2.2.6-45.el8_6.2	1:2.2.6-62.el8_10	1
quay.io/fiware/canis-major :1.5.15	bb40472e4ff5	cups@1:2.2.6-40.el8	1:2.2.6-62.el8_10	1
quay.io/fiware/contract-management :3.3.12	2bcfcf874451	cups@1:2.2.6-61.el8_10	1:2.2.6-62.el8_10	1
quay.io/fiware/credentials-config-service :3.4.3	f2fbced76da8	cups@1:2.2.6-61.el8_10	1:2.2.6-62.el8_10	1
quay.io/fiware/endpoint-configuration-service :0.4.3	0dc38a87b844	cups@1:2.2.6-44.el8	1:2.2.6-62.el8_10	1
quay.io/fiware/trusted-issuers-registry :0.11.1	a8a9ec461034	cups@1:2.2.6-45.el8_6.2	1:2.2.6-62.el8_10	1
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	cups@1:2.2.6-38.el8	1:2.2.6-62.el8_10	1
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	cups@1:2.2.6-50.el8	1:2.2.6-62.el8_10	1
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	cups@1:2.2.6-50.el8	1:2.2.6-62.el8_10	1
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	cups@1:2.2.6-50.el8	1:2.2.6-62.el8_10	1
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	cups@1:2.2.6-40.el8	1:2.2.6-62.el8_10	1
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	cups@1:2.2.6-45.el8_6.3	1:2.2.6-62.el8_10	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	cups@2.1.3-4ubuntu0.10	2.1.3-4ubuntu0.11+esm8	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	cups@1:2.2.6-40.el8	1:2.2.6-62.el8_10	1
quay.io/seamware/consent-facade :0.0.14	be844c750c7e	cups@1:2.2.6-61.el8_10	1:2.2.6-62.el8_10	1
quay.io/strimzi/operator :0.36.1	e9e03b31007c	cups@1:2.2.6-51.el8	1:2.2.6-62.el8_10	1
quay.io/wi_stefan/dss-validation-service :0.0.1	8e928db29ee1	cups@1:2.2.6-50.el8	1:2.2.6-62.el8_10	1