CVE-2010-4267
NoneCVSS
—
EPSS
10.8%
Published
Jan 20, 2011
CISA due date
—
The record
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | hplip | 0 | 3.10.6-2 |
| Debian:12 | hplip | 0 | 3.10.6-2 |
| Debian:13 | hplip | 0 | 3.10.6-2 |
| Debian:5.0 | hplip | 0 | 2.8.6.b-4+lenny1 |
| Red Hat:enterprise_linux:5::server | hpijs | 0 | 1:1.6.7-6.el5_6.1 |
| Red Hat:enterprise_linux:5::server | hpijs3 | 0 | 1:3.9.8-11.el5_6.1 |
| Red Hat:enterprise_linux:5::server | hplip | 0 | 0:1.6.7-6.el5_6.1 |
| Red Hat:enterprise_linux:5::server | hplip-debuginfo | 0 | 0:1.6.7-6.el5_6.1 |
| Red Hat:enterprise_linux:5::server | hplip3 | 0 | 0:3.9.8-11.el5_6.1 |
| Red Hat:enterprise_linux:5::server | hplip3-common | 0 | 0:3.9.8-11.el5_6.1 |
| Red Hat:enterprise_linux:5::server | hplip3-debuginfo | 0 | 0:3.9.8-11.el5_6.1 |
| Red Hat:enterprise_linux:5::server | hplip3-gui | 0 | 0:3.9.8-11.el5_6.1 |
| Red Hat:enterprise_linux:5::server | hplip3-libs | 0 | 0:3.9.8-11.el5_6.1 |
| Red Hat:enterprise_linux:5::server | libsane-hpaio | 0 | 0:1.6.7-6.el5_6.1 |
| Red Hat:enterprise_linux:5::server | libsane-hpaio3 | 0 | 0:3.9.8-11.el5_6.1 |
| Red Hat:enterprise_linux:6::client | hpijs | 0 | 1:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::client | hplip | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::client | hplip-common | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::client | hplip-debuginfo | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::client | hplip-gui | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::client | hplip-libs | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::client | libsane-hpaio | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::server | hpijs | 0 | 1:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::server | hplip | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::server | hplip-common | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::server | hplip-debuginfo | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::server | hplip-gui | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::server | hplip-libs | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::server | libsane-hpaio | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | hpijs | 0 | 1:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | hplip | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | hplip-common | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | hplip-debuginfo | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | hplip-gui | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | hplip-libs | 0 | 0:3.9.8-33.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | libsane-hpaio | 0 | 0:3.9.8-33.el6_0.1 |
| openSUSE:Tumbleweed | hplip | 0 | 3.16.10-1.1 |
Related vulnerabilities
- CVE-2020-6923 The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory… Also affects hplip
- CVE-2015-0839 The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for… Also affects hplip
- CVE-2011-2697 foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote… Also affects hplip
- CVE-2007-5208 hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before… Also affects hplip
- CVE-2026-8632 A potential security vulnerability has been identified in the HP Linux Imaging and… Also affects hplip
- CVE-2026-8631 A potential security vulnerability has been identified in the HP Linux Imaging and… Also affects hplip
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119