| Package | Affected versions | Patched versions |
|---|---|---|
| linux imaging and printing project | = 1.0= 2.0= 2.7.10= 3.10.2= 3.10.5= 3.10.6= 3.10.9= 3.11.1= 3.11.10= 3.11.3= 3.11.3a= 3.11.5= 3.11.7= 3.12.10= 3.12.11= 3.12.2= 3.12.4= 3.12.6= 3.12.9= 3.13.2= 3.13.3= 3.13.4= 3.13.5= 3.13.6= 3.13.7= 3.13.8= 3.13.9= 3.9.10= 3.9.12= 3.9.2= 3.9.4= 3.9.4b= 3.9.6= 3.9.8 |
The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free