GCVE - cpe:2.3:a:hp:linux_imaging_and_printing

Approved changes feed: RSS · Atom

cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.4:b:*:*:*:*:*:*

part: a version: 3.9.4 update: b

Vendor	Hp (`4e2366e1-58ef-5a93-a9f3-b1274f17de1d`)
Product	Linux Imaging And Printing Project (`a5783908-3a28-5b23-b9eb-6d3a19862aa1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:deb/debian/hplip`	purl2cpe	2026-06-01 10:16:44.355054
`pkg:deb/ubuntu/hplip`	purl2cpe	2026-06-01 10:16:44.355056
`pkg:github/jpopelka/hplip`	purl2cpe	2026-06-01 10:16:44.355058
`pkg:github/neverware-mirrors/hplip`	purl2cpe	2026-06-01 10:16:44.355059
`pkg:gitlab/redhat/hplip`	purl2cpe	2026-06-01 10:16:44.355061
`pkg:rpm/centos/hplip`	purl2cpe	2026-06-01 10:16:44.355062
`pkg:rpm/fedora/hplip`	purl2cpe	2026-06-01 10:16:44.355064
`pkg:rpm/opensuse/hplip`	purl2cpe	2026-06-01 10:16:44.355065

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-6427`	vulnerable	2026-06-08 05:04:56.673384	Details available upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream. Published: 2013-12-09T18:00:00.000Z Updated: 2024-08-06T17:39:01.183Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2085-1 http://lists.opensuse.org/opensuse-updates/2014-01/msg00087.html http://openwall.com/lists/oss-security/2013/12/05/2 http://www.debian.org/security/2013/dsa-2829 https://bugzilla.novell.com/show_bug.cgi?id=853405	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6402`	vulnerable	2026-06-08 05:04:56.484869	Details available base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file. Published: 2014-01-05T20:00:00.000Z Updated: 2024-08-06T17:39:01.355Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2085-1 https://bugzilla.novell.com/show_bug.cgi?id=852368 https://security-tracker.debian.org/tracker/CVE-2013-6402 http://lists.opensuse.org/opensuse-updates/2014-01/msg00087.html http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725876	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.