Описание
The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow.
A flaw was found in HPLIP. A heap-based overflow in the mdns_readName function and a stack-based overflow in the mdns_update_uris function can be triggered when processing specially crafted mDNS responses. This vulnerability allows an attacker on the local network to crash the application, resulting in a denial of service or potentially allowing code execution.
Отчет
This vulnerability allows an unauthenticated attacker on the same network to cause a denial of service or potentially achieve remote code execution. For these reasons, this issue has been rated with an important severity. Default Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.
Меры по смягчению последствий
To mitigate this vulnerability, consider removing the hplip package if its functionality is not required by using the command indicated below. Note this will remove HP printer support and related utilities from the system.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | hplip | Not affected | ||
| Red Hat Enterprise Linux 6 | hplip | Out of support scope | ||
| Red Hat Enterprise Linux 7 | hplip | Affected | ||
| Red Hat Enterprise Linux 9 | hplip | Not affected | ||
| Red Hat Enterprise Linux 8 | hplip | Fixed | RHSA-2026:82295 | 13.10.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
8 High
CVSS3
Связанные уязвимости
The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow.
The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow.
The HP Linux Imaging and Printing (HPLIP) software may potentially be ...
EPSS
8 High
CVSS3