Описание
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
A flaw was found in HPLIP. Multiple vulnerabilities in several software components could potentially allow a remote attacker to achieve remote code execution or privilege escalation under certain conditions, requiring user interaction. These flaws could also lead to denial of service, information disclosure, or unauthorized file modification.
Отчет
Red Hat has rated this vulnerability as Important because successful exploitation could lead to privilege elevation or arbitrary code execution in the context of the printing subsystem if an unprivileged user or remote actor triggers the flawed routines. HPLIP is typically installed as part of desktop environments or dedicated print servers interacting with HP hardware, rather than standard headless enterprise server deployments. Exploitation requires specific conditions, including active user interaction or processing manipulated inputs, which limits automated or unattended attacks on enterprise systems.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | hplip | Out of support scope | ||
| Red Hat Enterprise Linux 7 | hplip | Affected | ||
| Red Hat Enterprise Linux 10 | hplip | Fixed | RHSA-2026:82883 | 14.10.2026 |
| Red Hat Enterprise Linux 8 | hplip | Fixed | RHSA-2026:82295 | 13.10.2026 |
| Red Hat Enterprise Linux 9 | hplip | Fixed | RHSA-2026:82882 | 14.10.2026 |
Показывать по
Дополнительная информация
Статус:
8.8 High
CVSS3
Связанные уязвимости
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
HP has identified and remediated multiple externally reported vulnerab ...
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
8.8 High
CVSS3