Описание
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
A flaw was found in HP Linux Imaging and Printing (HPLIP) software. Multiple vulnerabilities exist within several software components that could potentially allow an attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files without authorization under certain conditions.
Отчет
Red Hat has classified this vulnerability with an Important severity rating because, despite requiring local user interaction, successful exploitation permits complete compromise of host integrity, confidentiality, and service availability. In standard Red Hat Enterprise Linux deployments, the HPLIP suite is primarily utilized on workstations and print gateways interfacing with HP peripherals, leaving minimal or headless server installations largely unexposed. Consequently, the operational risk is confined to systems actively executing HP printing utilities or processing untrusted print tasks.
Меры по смягчению последствий
To reduce the attack surface, restrict network access to systems running HPLIP if network printing or remote management features are not actively used. Alternatively, if HPLIP functionality is not required, the hplip package can be removed.
To remove the package:
sudo dnf remove hplip
Removing the package will impact printing capabilities for HP devices.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | hplip | Out of support scope | ||
| Red Hat Enterprise Linux 7 | hplip | Affected | ||
| Red Hat Enterprise Linux 10 | hplip | Fixed | RHSA-2026:82883 | 14.10.2026 |
| Red Hat Enterprise Linux 8 | hplip | Fixed | RHSA-2026:82295 | 13.10.2026 |
| Red Hat Enterprise Linux 9 | hplip | Fixed | RHSA-2026:82882 | 14.10.2026 |
Показывать по
Дополнительная информация
Статус:
7.8 High
CVSS3
Связанные уязвимости
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
HP has identified and remediated multiple externally reported vulnerab ...
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
ALT-PU-2026-16571: package `hplip` update to version 3.26.6-alt2
7.8 High
CVSS3