Описание
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
A flaw was found in HPLIP (HP Linux Imaging and Printing) software. Multiple vulnerabilities exist that could allow a remote attacker to execute arbitrary code, escalate privileges, cause a denial of service, disclose sensitive information, or modify files without authorization. These issues arise under specific, unspecified conditions.
Отчет
This vulnerability is rated as Important severity because successful exploitation could permit an authenticated or adjacent attacker to execute unauthorized code or elevate privileges across print management components. On Red Hat Enterprise Linux, HPLIP is generally deployed alongside desktop environments or dedicated print server roles rather than minimal base installations. Systems that do not configure HP printing devices or do not expose print services to untrusted networks carry significantly reduced operational risk.
Меры по смягчению последствий
To mitigate this issue, if HPLIP functionality is not required, consider removing the hplip package. This can be done using the following command:
sudo dnf remove hplip
Removing this package will disable HP printer support and related utilities.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | hplip | Out of support scope | ||
| Red Hat Enterprise Linux 7 | hplip | Affected | ||
| Red Hat Enterprise Linux 10 | hplip | Fixed | RHSA-2026:82883 | 14.10.2026 |
| Red Hat Enterprise Linux 8 | hplip | Fixed | RHSA-2026:82295 | 13.10.2026 |
| Red Hat Enterprise Linux 9 | hplip | Fixed | RHSA-2026:82882 | 14.10.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
8.8 High
CVSS3
Связанные уязвимости
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
HP has identified and remediated multiple externally reported vulnerab ...
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
ALT-PU-2026-16571: package `hplip` update to version 3.26.6-alt2
EPSS
8.8 High
CVSS3