CVE-2010-4267

Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
Affected Products (NVD)
VendorProductVersion
hplinux_imaging_and_printing_project
1.6.7
hplinux_imaging_and_printing_project
3.9.8
hplinux_imaging_and_printing_project
3.10.9
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
hplip
bookworm
3.22.10+dfsg0-2
fixed
bullseye
3.21.2+dfsg1-2
fixed
sid
3.22.10+dfsg0-5.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
hplip
dapper
not-affected
hardy
Fixed 2.8.2-0ubuntu8.2
released
karmic
Fixed 3.9.8-1ubuntu2.1
released
lucid
Fixed 3.10.2-2ubuntu2.2
released
maverick
Fixed 3.10.6-1ubuntu10.2
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
hplip
suse enterprise sap 12 SP5
3.16.11-1.33
fixed
suse enterprise server 12
3.14.6-3.5
fixed
suse enterprise server 12 SP2
3.14.6-3.5
fixed
suse enterprise server 12 SP3
3.16.11-1.33
fixed
suse enterprise server 12 SP4
3.16.11-1.33
fixed
suse enterprise server 12 SP5
3.16.11-1.33
fixed
hplip-devel
suse enterprise desktop 15
3.17.9-3.38
fixed
suse enterprise sap 15
3.17.9-3.38
fixed
suse enterprise server 15
3.17.9-3.38
fixed
hplip-hpijs
suse enterprise desktop 15
3.17.9-3.38
fixed
suse enterprise sap 12 SP5
3.16.11-1.33
fixed
suse enterprise sap 15
3.17.9-3.38
fixed
suse enterprise server 12
3.14.6-3.5
fixed
suse enterprise server 12 SP2
3.14.6-3.5
fixed
suse enterprise server 12 SP3
3.16.11-1.33
fixed
suse enterprise server 12 SP4
3.16.11-1.33
fixed
suse enterprise server 12 SP5
3.16.11-1.33
fixed
suse enterprise server 15
3.17.9-3.38
fixed
hplip-sane
suse enterprise desktop 15
3.17.9-3.38
fixed
suse enterprise sap 12 SP5
3.16.11-1.33
fixed
suse enterprise sap 15
3.17.9-3.38
fixed
suse enterprise server 12
3.14.6-3.5
fixed
suse enterprise server 12 SP2
3.14.6-3.5
fixed
suse enterprise server 12 SP3
3.16.11-1.33
fixed
suse enterprise server 12 SP4
3.16.11-1.33
fixed
suse enterprise server 12 SP5
3.16.11-1.33
fixed
suse enterprise server 15
3.17.9-3.38
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
hpijs
RHEL 6
1:3.9.8-33.el6_0.1
fixed
hplip
RHEL 6
0:3.9.8-33.el6_0.1
fixed
hplip-common
RHEL 6
0:3.9.8-33.el6_0.1
fixed
hplip-gui
RHEL 6
0:3.9.8-33.el6_0.1
fixed
hplip-libs
RHEL 6
0:3.9.8-33.el6_0.1
fixed
libsane-hpaio
RHEL 6
0:3.9.8-33.el6_0.1
fixed
References