| Package | Affected versions | Patched versions |
|---|---|---|
| linux imaging and printing project | = 3.10.2= 3.10.5= 3.10.6= 3.10.9= 3.11.1= 3.11.3= 3.11.3a= 3.11.7= 3.9.10= 3.9.12= 3.9.2= 3.9.4= 3.9.4b= 3.9.6= 3.9.8≤ 3.11.5 |
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free