Approved changes feed: RSS · Atom

cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.4:*:*:*:*:*:*:*

part: a version: 3.13.4 update: *

VendorHp (4e2366e1-58ef-5a93-a9f3-b1274f17de1d)
ProductLinux Imaging And Printing Project (a5783908-3a28-5b23-b9eb-6d3a19862aa1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/hplip purl2cpe 2026-06-01 10:16:44.333370
pkg:deb/ubuntu/hplip purl2cpe 2026-06-01 10:16:44.333371
pkg:github/jpopelka/hplip purl2cpe 2026-06-01 10:16:44.333373
pkg:github/neverware-mirrors/hplip purl2cpe 2026-06-01 10:16:44.333374
pkg:gitlab/redhat/hplip purl2cpe 2026-06-01 10:16:44.333376
pkg:rpm/centos/hplip purl2cpe 2026-06-01 10:16:44.333377
pkg:rpm/fedora/hplip purl2cpe 2026-06-01 10:16:44.333378
pkg:rpm/opensuse/hplip purl2cpe 2026-06-01 10:16:44.333380

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6427 vulnerable 2026-06-08 05:04:56.673846 Details available
upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream.
Published: 2013-12-09T18:00:00.000Z
Updated: 2024-08-06T17:39:01.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6402 vulnerable 2026-06-08 05:04:56.499346 Details available
base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.
Published: 2014-01-05T20:00:00.000Z
Updated: 2024-08-06T17:39:01.355Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4325 vulnerable 2026-06-08 05:04:35.532349 Details available
The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
Published: 2013-09-23T10:00:00.000Z
Updated: 2024-08-06T16:38:01.937Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.