Total vulnerabilities in the database
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
| Software | From | Fixed in |
|---|---|---|
| hp / linux_imaging_and_printing_project | 3.9.6 | 3.9.6.x |
| hp / linux_imaging_and_printing_project | 3.10.6 | 3.10.6.x |
| hp / linux_imaging_and_printing_project | 3.11.1 | 3.11.1.x |
| hp / linux_imaging_and_printing_project | 3.11.3a | 3.11.3a.x |
| hp / linux_imaging_and_printing_project | 3.9.4b | 3.9.4b.x |
| hp / linux_imaging_and_printing_project | 3.9.12 | 3.9.12.x |
| hp / linux_imaging_and_printing_project | 3.9.4 | 3.9.4.x |
| hp / linux_imaging_and_printing_project | 3.9.10 | 3.9.10.x |
| hp / linux_imaging_and_printing_project | 3.10.9 | 3.10.9.x |
| hp / linux_imaging_and_printing_project | 3.9.8 | 3.9.8.x |
| hp / linux_imaging_and_printing_project | 3.10.5 | 3.10.5.x |
| hp / linux_imaging_and_printing_project | 3.11.3 | 3.11.3.x |
| hp / linux_imaging_and_printing_project | 3.9.2 | 3.9.2.x |
| hp / linux_imaging_and_printing_project | 3.10.2 | 3.10.2.x |
| hp / linux_imaging_and_printing_project | - | 3.11.5.x |
| hp / linux_imaging_and_printing_project | 3.11.7 | 3.11.7.x |