Summary
Enrico Zini discovered that HPLIP used a short GPG key ID when downloading
keys from the keyserver. An attacker could possibly use this to return a
different key with a duplicate short key id and perform a machine-in-the-middle
attack on printer plugin installations.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | hplip | 3.14.3-0ubuntu3.4 |
Vulnerabilities 1
-
Unscored —
The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execu…
References
-
report
https://ubuntu.com/security/CVE-2015-0839