// For flags

CVE-2010-4267

hplip: remote stack overflow vulnerability

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.

Desbordamiento de búfer basado en pila en la función hpmud_get_pml de io/hpmud/pml.c de Hewlett-Packard Linux Imaging and Printing (HPLIP) v1.6.7, v3.9.8, v3.10.9 y puede que otras versiones, permite a atacantes remotos provocar una denegación de servicio (caída) y probablemente ejecutar código de su elección mediante una respuesta SNMP manipulada con un valor de longitud largo.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
Attack Vector
Adjacent
Attack Complexity
High
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2010-11-16 CVE Reserved
  • 2011-01-20 CVE Published
  • 2023-09-10 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (29)
URL Tag Source
http://osvdb.org/70498 Vdb Entry
http://secunia.com/advisories/43022 Third Party Advisory
http://secunia.com/advisories/43068 Third Party Advisory
http://secunia.com/advisories/43083 Third Party Advisory
http://secunia.com/advisories/43102 Third Party Advisory
http://secunia.com/advisories/48441 Third Party Advisory
http://www.securityfocus.com/bid/45833 Vdb Entry
http://www.securitytracker.com/id?1024967 Vdb Entry
http://www.vupen.com/english/advisories/2011/0211 Vdb Entry
http://www.vupen.com/english/advisories/2011/0212 Vdb Entry
http://www.vupen.com/english/advisories/2011/0228 Vdb Entry
http://www.vupen.com/english/advisories/2011/0243 Vdb Entry
https://bugzilla.redhat.com/attachment.cgi?id=468455&action=diff X_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/64738 Vdb Entry
URL Date SRC
URL Date SRC
URL Date SRC
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053472.html 2017-08-17
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053474.html 2017-08-17
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html 2017-08-17
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html 2017-08-17
http://secunia.com/advisories/42939 2017-08-17
http://secunia.com/advisories/42956 2017-08-17
http://security.gentoo.org/glsa/glsa-201203-17.xml 2017-08-17
http://www.debian.org/security/2011/dsa-2152 2017-08-17
http://www.mandriva.com/security/advisories?name=MDVSA-2011:013 2017-08-17
http://www.redhat.com/support/errata/RHSA-2011-0154.html 2017-08-17
http://www.ubuntu.com/usn/USN-1051-1 2017-08-17
http://www.vupen.com/english/advisories/2011/0136 2017-08-17
http://www.vupen.com/english/advisories/2011/0160 2017-08-17
https://bugzilla.redhat.com/show_bug.cgi?id=662740 2011-01-17
https://access.redhat.com/security/cve/CVE-2010-4267 2011-01-17
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Hp
Search vendor "Hp"
 Linux Imaging And Printing Project
Search vendor "Hp" for product "Linux Imaging And Printing Project"
 1.6.7
Search vendor "Hp" for product "Linux Imaging And Printing Project" and version "1.6.7"
-
Affected
Hp
Search vendor "Hp"
 Linux Imaging And Printing Project
Search vendor "Hp" for product "Linux Imaging And Printing Project"
 3.9.8
Search vendor "Hp" for product "Linux Imaging And Printing Project" and version "3.9.8"
-
Affected
Hp
Search vendor "Hp"
 Linux Imaging And Printing Project
Search vendor "Hp" for product "Linux Imaging And Printing Project"
 3.10.9
Search vendor "Hp" for product "Linux Imaging And Printing Project" and version "3.10.9"
-
Affected