kritisch
CVE-2026-8631
HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (hoch), AlmaLinux (hoch), Oracle (hoch), Rocky Linux (hoch), Ubuntu (mittel).
Beschreibung
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alma 8 | hplip, hplip-common, hplip-gui und 2 weitere | 3.18.4-13.el8_10.alma.1 |
| alma 9 | hplip, hplip-common, hplip-libs und 1 weitere | 3.21.2-6.el9_8.4.alma.1 |
| debian 11 | hplip | 3.21.2+dfsg1-2+deb11u1 |
| debian 12 | hplip | 3.22.10+dfsg0-2+deb12u1 |
| debian 13 | hplip | 3.22.10+dfsg0-8.1+deb13u1 |
| debian 14 | hplip | 3.26.4+dfsg0-1 |
| echo | hplip | 3.22.10+dfsg0-2+deb12u1 |
| Oracle Linux 8 | hplip, hplip-common, hplip-gui und 2 weitere | 3.18.4-13.el8_10 |
| Oracle Linux 9 | hplip, hplip-common, hplip-libs und 1 weitere | 3.21.2-6.el9_8.4 |
| rapidfort alma 9 | hplip, hplip-common, hplip-libs und 1 weitere | 0:3.21.2-6.el9_2.1, 3.21.2-6.el9_8.4.alma.1 und 1 weitere |
| rapidfort debian 12 | hplip | 0:3.22.10+dfsg0-2+deb12u1 |
| rapidfort debian 13 | hplip | 0:3.22.10+dfsg0-2+deb12u1 |
Alle 72 Einträge aus 27 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alma 8 | hplip | 3.18.4-13.el8_10.alma.1 |
| alma 8 | hplip-common | 3.18.4-13.el8_10.alma.1 |
| alma 8 | hplip-gui | 3.18.4-13.el8_10.alma.1 |
| alma 8 | hplip-libs | 3.18.4-13.el8_10.alma.1 |
| alma 8 | libsane-hpaio | 3.18.4-13.el8_10.alma.1 |
| alma 9 | hplip | 3.21.2-6.el9_8.4.alma.1 |
| alma 9 | hplip-common | 3.21.2-6.el9_8.4.alma.1 |
| alma 9 | hplip-libs | 3.21.2-6.el9_8.4.alma.1 |
| alma 9 | libsane-hpaio | 3.21.2-6.el9_8.4.alma.1 |
| debian 11 | hplip | 3.21.2+dfsg1-2+deb11u1 |
| debian 12 | hplip | 3.22.10+dfsg0-2+deb12u1 |
| debian 13 | hplip | 3.22.10+dfsg0-8.1+deb13u1 |
| debian 14 | hplip | 3.26.4+dfsg0-1 |
| echo | hplip | 3.22.10+dfsg0-2+deb12u1 |
| Oracle Linux 8 | hplip | 3.18.4-13.el8_10 |
| Oracle Linux 8 | hplip-common | 3.18.4-13.el8_10 |
| Oracle Linux 8 | hplip-gui | 3.18.4-13.el8_10 |
| Oracle Linux 8 | hplip-libs | 3.18.4-13.el8_10 |
| Oracle Linux 8 | libsane-hpaio | 3.18.4-13.el8_10 |
| Oracle Linux 9 | hplip | 3.21.2-6.el9_8.4 |
| Oracle Linux 9 | hplip-common | 3.21.2-6.el9_8.4 |
| Oracle Linux 9 | hplip-libs | 3.21.2-6.el9_8.4 |
| Oracle Linux 9 | libsane-hpaio | 3.21.2-6.el9_8.4 |
| rapidfort alma 9 | hplip | 0:3.21.2-6.el9_2.1, 3.21.2-6.el9_8.4.alma.1 |
| rapidfort alma 9 | hplip-common | 3.21.2-6.el9_8.4.alma.1 |
| rapidfort alma 9 | hplip-libs | 3.21.2-6.el9_8.4.alma.1 |
| rapidfort alma 9 | libsane-hpaio | 3.21.2-6.el9_8.4.alma.1 |
| rapidfort debian 12 | hplip | 0:3.22.10+dfsg0-2+deb12u1 |
| rapidfort debian 13 | hplip | 0:3.22.10+dfsg0-2+deb12u1 |
| rapidfort fedora 43 | hplip | 3.26.4-2.fc43 |
| rapidfort fedora 43 | hplip-common | 3.26.4-2.fc43 |
| rapidfort fedora 43 | hplip-gui | 3.26.4-2.fc43 |
| rapidfort fedora 43 | hplip-libs | 3.26.4-2.fc43 |
| rapidfort fedora 43 | libsane-hpaio | 3.26.4-2.fc43 |
| rapidfort Oracle Linux 10 | hplip | 0:3.23.12-10.el10_2.5 |
| rapidfort Oracle Linux 10 | hplip-common | 0:3.23.12-10.el10_2.5 |
| rapidfort Oracle Linux 10 | hplip-libs | 0:3.23.12-10.el10_2.5 |
| rapidfort Oracle Linux 10 | libsane-hpaio | 0:3.23.12-10.el10_2.5 |
| rapidfort Oracle Linux 9 | hplip | 0:3.21.2-6.el9_8.4 |
| rapidfort Oracle Linux 9 | hplip-common | 0:3.21.2-6.el9_8.4 |
| rapidfort Oracle Linux 9 | hplip-libs | 0:3.21.2-6.el9_8.4 |
| rapidfort Oracle Linux 9 | libsane-hpaio | 0:3.21.2-6.el9_8.4 |
| rapidfort rocky 9 | hplip | 0:3.21.2-6.el9_8.4 |
| rapidfort rocky 9 | hplip-common | 0:3.21.2-6.el9_8.4 |
| rapidfort rocky 9 | hplip-libs | 0:3.21.2-6.el9_8.4 |
| rapidfort rocky 9 | libsane-hpaio | 0:3.21.2-6.el9_8.4 |
| rapidfort ubuntu 20.04 | hplip | 0:3.21.12+dfsg0-1ubuntu0.1, 0:3.23.12+dfsg0-0ubuntu5.1 |
| rapidfort ubuntu 22.04 | hplip | 0:3.21.12+dfsg0-1ubuntu0.1, 0:3.23.12+dfsg0-0ubuntu5.1 |
| rapidfort ubuntu 24.04 | hplip | 0:3.21.12+dfsg0-1ubuntu0.1, 0:3.23.12+dfsg0-0ubuntu5.1 |
| Red Hat | hpijs | kein Fix angegeben |
| Red Hat | hplip | kein Fix angegeben |
| Red Hat | hplip-common | kein Fix angegeben |
| Red Hat | hplip-gui | kein Fix angegeben |
| Red Hat | hplip-libs | kein Fix angegeben |
| Red Hat | libsane-hpaio | kein Fix angegeben |
| rocky 10 | hplip | 3.23.12-10.el10_2.4 |
| rocky 10 | hplip-common | 3.23.12-10.el10_2.4 |
| rocky 10 | hplip-libs | 3.23.12-10.el10_2.4 |
| rocky 10 | libsane-hpaio | 3.23.12-10.el10_2.4 |
| rocky 8 | hplip | 3.18.4-13.el8_10 |
| rocky 8 | hplip-common | 3.18.4-13.el8_10 |
| rocky 8 | hplip-gui | 3.18.4-13.el8_10 |
| rocky 8 | hplip-libs | 3.18.4-13.el8_10 |
| rocky 8 | libsane-hpaio | 3.18.4-13.el8_10 |
| rocky 9 | hplip | 3.21.2-6.el9_8.4 |
| rocky 9 | hplip-common | 3.21.2-6.el9_8.4 |
| rocky 9 | hplip-libs | 3.21.2-6.el9_8.4 |
| rocky 9 | libsane-hpaio | 3.21.2-6.el9_8.4 |
| ubuntu 22.04 | hplip | 3.21.12+dfsg0-1ubuntu0.1 |
| ubuntu 24.04 | hplip | 3.23.12+dfsg0-0ubuntu5.1 |
| ubuntu 25.10 | hplip | 3.24.4+dfsg0-0ubuntu5.2 |
| ubuntu 26.04 | hplip | 3.24.4+dfsg0-0ubuntu8.1 |
Referenzen
- https://access.redhat.com/errata/RHSA-2026:26228
- https://access.redhat.com/errata/RHSA-2026:26297
- https://access.redhat.com/errata/RHSA-2026:26335
- https://access.redhat.com/errata/RHSA-2026:48171
- https://access.redhat.com/errata/RHSA-2026:48586
- https://access.redhat.com/errata/RHSA-2026:48603
- https://access.redhat.com/errata/RHSA-2026:48606
- https://access.redhat.com/errata/RHSA-2026:48959
Alle 27 Referenzen
- https://access.redhat.com/errata/RHSA-2026:48960
- https://access.redhat.com/errata/RHSA-2026:48961
- https://access.redhat.com/security/cve/CVE-2026-8631
- https://bugzilla.redhat.com/2480297
- https://bugzilla.redhat.com/2480300
- https://bugzilla.redhat.com/show_bug.cgi?id=2480297
- https://bugzilla.redhat.com/show_bug.cgi?id=2480300
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8631
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8632
- https://errata.almalinux.org/9/ALSA-2026-26297.html
- https://errata.rockylinux.org/RLSA-2026:26297
- https://linux.oracle.com/cve/CVE-2026-8631.html
- https://linux.oracle.com/errata/ELSA-2026-26335.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-8631
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8631.json
- https://support.hp.com/us-en/document/ish_14942099-14942126-16/hpsbpi04118
- https://ubuntu.com/security/notices/USN-8483-1
- https://www.cve.org/CVERecord?id=CVE-2026-8631