Format string error in hplip - #VU101061

Vulnerability identifier: #VU101061

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-134

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a format string error when handling a device URI connected via USB port. A local user can connect a malicious printer to the system and execute arbitrary code with root privileges.

hplip
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Basesystem Module
Desktop Applications Module
openSUSE Leap
hplip-debuginfo
hplip-sane
hplip-scan-utils-debuginfo
hplip-scan-utils
hplip-sane-debuginfo
hplip-hpijs
hplip-hpijs-debuginfo
hplip-debugsource
hplip
hplip-devel
hplip-udev-rules

Install updates from vendor's website.

hplip - update to 3.24.4
hplip-debuginfo - addressed in versions 3.21.10-150400.3.14.1, 3.23.8-150600.4.3.1
hplip-sane - addressed in versions 3.21.10-150400.3.14.1, 3.23.8-150600.4.3.1
hplip-scan-utils-debuginfo - addressed in versions 3.21.10-150400.3.14.1, 3.23.8-150600.4.3.1
hplip-scan-utils - addressed in versions 3.21.10-150400.3.14.1, 3.23.8-150600.4.3.1
hplip-sane-debuginfo - addressed in versions 3.21.10-150400.3.14.1, 3.23.8-150600.4.3.1
hplip-hpijs - addressed in versions 3.21.10-150400.3.14.1, 3.23.8-150600.4.3.1
hplip-hpijs-debuginfo - addressed in versions 3.21.10-150400.3.14.1, 3.23.8-150600.4.3.1
hplip-debugsource - addressed in versions 3.21.10-150400.3.14.1, 3.23.8-150600.4.3.1
hplip - addressed in versions 3.21.10-150400.3.14.1, 3.23.8-150600.4.3.1
hplip-devel - addressed in versions 3.21.10-150400.3.14.1, 3.23.8-150600.4.3.1
hplip-udev-rules - update to 3.23.8-150600.4.3.1

• https://bugzilla.suse.com/show_bug.cgi?id=1209401
• https://bugzilla.opensuse.org/show_bug.cgi?id=1209866
• https://build.opensuse.org/request/show/1075095

• Privilege escalation in hplip
• SUSE update for hplip
• SUSE update for hplip