CVE-2008-2941: Input Validation
hplip is vulnerable to a Denial-Of-Service-Attack via it's listener port.
Other sources
The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process stop) via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/hplipto a version that resolves this vulnerability.Fixed in 2.8.6-1 - Upgrade
Upgrade
debian/hplipto a version that resolves this vulnerability.Fixed in 3.22.10+dfsg0-2Fixed in 3.22.10+dfsg0-2+deb12u1Fixed in 3.22.10+dfsg0-8.1+deb13u1Fixed in 3.26.4+dfsg0-4
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2941?
CVE-2008-2941 has a high severity rating due to its potential to cause a denial of service.
How do I fix CVE-2008-2941?
To fix CVE-2008-2941, update to a newer version of HP Linux Imaging and Printing that addresses this vulnerability.
Who is affected by CVE-2008-2941?
CVE-2008-2941 affects local users of HP Linux Imaging and Printing version 1.6.7.
What type of attack does CVE-2008-2941 involve?
CVE-2008-2941 involves a denial of service attack via crafted packets sent to TCP port 2207.
Is CVE-2008-2941 related to any specific software?
Yes, CVE-2008-2941 is specifically related to HP Linux Imaging and Printing version 1.6.7.