CVE-2010-4267: Buffer Overflow
Sebastian Krahmer reported a flaw in how hplip discovered SNMP devices. If certain hplip commands were run that queried SNMP devices, and a malicious user were able to send crafted SNMP responses, it could cause the running hplip tool to crash or, possibly, execute arbitrary code with the privileges of the user running the tool.
Acknowledgements:
Red Hat would like to thank Sebastian Krahmer of the SuSE Security Team for reporting this issue.
Other sources
Stack-based buffer overflow in the hpmudgetpml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4267?
CVE-2010-4267 has a medium severity due to potential crashes and execution of arbitrary code.
How do I fix CVE-2010-4267?
To fix CVE-2010-4267, upgrade to the latest version of HP Linux Imaging and Printing that is not affected by this vulnerability.
What systems are affected by CVE-2010-4267?
CVE-2010-4267 affects specific versions of HP Linux Imaging and Printing, including 1.6.7, 3.9.8, and 3.10.9.
How does CVE-2010-4267 impact system security?
CVE-2010-4267 can allow a malicious user to send crafted SNMP responses, potentially leading to crashes or arbitrary code execution.
Who reported CVE-2010-4267?
CVE-2010-4267 was reported by Sebastian Krahmer.