rpm package
opensuse/hplip&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/hplip&distro=openSUSE%20Tumbleweed
Vulnerabilities (13)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-8632 | Hig | 7.8 | < 3.26.4-1.1 | 3.26.4-1.1 | May 20, 2026 | A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection. | |
| CVE-2026-8631 | Cri | 9.8 | < 3.26.4-1.1 | 3.26.4-1.1 | May 20, 2026 | A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print | |
| CVE-2025-43023 | — | < 3.26.4-1.1 | 3.26.4-1.1 | Jul 28, 2025 | A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA). | ||
| CVE-2020-6923 | Med | 5.7 | < 3.24.4-4.1 | 3.24.4-4.1 | Dec 19, 2024 | The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow. | |
| CVE-2015-0839 | Hig | 8.1 | < 3.16.10-1.1 | 3.16.10-1.1 | Aug 2, 2017 | The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads. | |
| CVE-2013-6402 | — | < 3.16.10-1.1 | 3.16.10-1.1 | Jan 5, 2014 | base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file. | ||
| CVE-2013-6427 | — | < 3.16.10-1.1 | 3.16.10-1.1 | Dec 9, 2013 | upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream. | ||
| CVE-2013-4325 | — | < 3.16.10-1.1 | 3.16.10-1.1 | Sep 23, 2013 | The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess Polkit | ||
| CVE-2011-2722 | — | < 3.16.10-1.1 | 3.16.10-1.1 | May 25, 2012 | The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file. | ||
| CVE-2011-2697 | — | < 3.16.10-1.1 | 3.16.10-1.1 | Jul 29, 2011 | foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file. | ||
| CVE-2010-4267 | — | < 3.16.10-1.1 | 3.16.10-1.1 | Jan 20, 2011 | Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via | ||
| CVE-2007-5208 | — | < 3.21.6-1.2 | 3.21.6-1.2 | Oct 13, 2007 | hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail. | ||
| CVE-2004-0801 | — | < 3.16.10-1.1 | 3.16.10-1.1 | Sep 16, 2004 | Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands. |
- affected < 3.26.4-1.1fixed 3.26.4-1.1
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.
- affected < 3.26.4-1.1fixed 3.26.4-1.1
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print
- CVE-2025-43023Jul 28, 2025affected < 3.26.4-1.1fixed 3.26.4-1.1
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).
- affected < 3.24.4-4.1fixed 3.24.4-4.1
The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow.
- affected < 3.16.10-1.1fixed 3.16.10-1.1
The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads.
- CVE-2013-6402Jan 5, 2014affected < 3.16.10-1.1fixed 3.16.10-1.1
base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.
- CVE-2013-6427Dec 9, 2013affected < 3.16.10-1.1fixed 3.16.10-1.1
upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream.
- CVE-2013-4325Sep 23, 2013affected < 3.16.10-1.1fixed 3.16.10-1.1
The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess Polkit
- CVE-2011-2722May 25, 2012affected < 3.16.10-1.1fixed 3.16.10-1.1
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
- CVE-2011-2697Jul 29, 2011affected < 3.16.10-1.1fixed 3.16.10-1.1
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.
- CVE-2010-4267Jan 20, 2011affected < 3.16.10-1.1fixed 3.16.10-1.1
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via
- CVE-2007-5208Oct 13, 2007affected < 3.21.6-1.2fixed 3.21.6-1.2
hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.
- CVE-2004-0801Sep 16, 2004affected < 3.16.10-1.1fixed 3.16.10-1.1
Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands.