Akamai finds many systems with exposed CUPS vulnerability


Akamai
<a href="https://www.akamai.com/blog/security-research/october-cups-ddos-threat" rel="nofollow">
released a report</a> pointing out that the
<a href="https://lwn.net/Articles/991929/" rel="nofollow">
recently-reported CUPS vulnerability</a>
(https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/
)
could be used to drive distributed denial-of-service (DDoS) attacks as well. Even if an attacker cannot gain remote control over a computer, they can still cause it to fetch a URL of their choice — potentially getting free DDoS amplification.



The Akamai Security Intelligence and Response Team (SIRT) found that more than 198,000 devices are vulnerable to this attack vector and are accessible on the public internet; roughly 34% of those could be used for DDoS abuse (58,000+).


https://lwn.net/Articles/993044/