Description
The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process stop) via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | hplip | 2.8.6-1 | — |
| Debian 12 | hplip | 2.8.6-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | hpijs | 1:1.6.7-4.1.el5_2.4 | RHSA-2008:0818 |
| RHEL 5 | hplip +1 | 1.6.7-4.1.el5_2.4 | RHSA-2008:0818 |
Advisories 1
- RHSA-2008:0818 Red Hat Security Advisory: hplip security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 30683 vdb-entry
- hplip-hpssd-dos(44440) vdb-entry
- 31470 third-party-advisory
- MDVSA-2008:169 vendor-advisory
- SUSE-SR:2008:021 vendor-advisory
- oval:org.mitre.oval:def:10636 vdb-entry signature
- USN-674-1 vendor-advisory
- 1020683 vdb-entry
- USN-674-2 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=457052
- 32792 third-party-advisory
- 31499 third-party-advisory
- 32316 third-party-advisory
- RHSA-2008:0818 vendor-advisory