Approved changes feed: RSS · Atom

cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.5:*:*:*:*:*:*:*

part: a version: 3.11.5 update: *

VendorHp (4e2366e1-58ef-5a93-a9f3-b1274f17de1d)
ProductLinux Imaging And Printing Project (a5783908-3a28-5b23-b9eb-6d3a19862aa1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/hplip purl2cpe 2026-06-01 10:16:44.333203
pkg:deb/ubuntu/hplip purl2cpe 2026-06-01 10:16:44.333204
pkg:github/jpopelka/hplip purl2cpe 2026-06-01 10:16:44.333206
pkg:github/neverware-mirrors/hplip purl2cpe 2026-06-01 10:16:44.333208
pkg:gitlab/redhat/hplip purl2cpe 2026-06-01 10:16:44.333209
pkg:rpm/centos/hplip purl2cpe 2026-06-01 10:16:44.333211
pkg:rpm/fedora/hplip purl2cpe 2026-06-01 10:16:44.333212
pkg:rpm/opensuse/hplip purl2cpe 2026-06-01 10:16:44.333214

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6427 vulnerable 2026-06-08 05:04:56.673621 Details available
upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream.
Published: 2013-12-09T18:00:00.000Z
Updated: 2024-08-06T17:39:01.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6402 vulnerable 2026-06-08 05:04:56.492762 Details available
base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.
Published: 2014-01-05T20:00:00.000Z
Updated: 2024-08-06T17:39:01.355Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4325 vulnerable 2026-06-08 05:04:35.526068 Details available
The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
Published: 2013-09-23T10:00:00.000Z
Updated: 2024-08-06T16:38:01.937Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0200 vulnerable 2026-06-08 05:03:45.792222 Details available
HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.
Published: 2013-03-06T20:00:00.000Z
Updated: 2024-08-06T14:18:09.510Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6108 vulnerable 2026-06-08 05:02:59.503472 Details available
HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations.
Published: 2014-02-15T11:00:00.000Z
Updated: 2024-08-06T21:28:39.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2697 vulnerable 2026-06-08 04:58:08.441435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.