https://seclists.org/oss-sec/2023/q4/249: hplip: security issues in `hpps` program due to fixed /tmp path usage in prnt/hpps/hppsfilter.c
Published Nov 30, 2023
·Updated
Affected Software
1 affected component
HP hplip
Frequently Asked Questions
1
What is the severity of CVE-2023-xxxx?
The severity of CVE-2023-xxxx is classified as high due to the risk of local file exposure.
2
How do I fix CVE-2023-xxxx?
To fix CVE-2023-xxxx, users should update to the latest version of the HP hplip software that addresses the fixed /tmp path usage issue.
3
What systems are affected by CVE-2023-xxxx?
CVE-2023-xxxx affects all versions of the HP hplip software that utilize the vulnerable hpps program.
4
Is there a workaround for CVE-2023-xxxx?
A temporary workaround for CVE-2023-xxxx includes avoiding usage of the hpps program until the software is updated.
5
What is the impact of CVE-2023-xxxx on user data?
CVE-2023-xxxx may lead to unauthorized access to sensitive user data stored in temporary files.