CVE-2008-2941

Publication date 14 August 2008

Last updated 26 May 2025

Ubuntu priority

Medium

Why this priority?

The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process stop) via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207.

Read the notes from the security team

Status

Package Ubuntu Release Status
hplip 8.10 intrepid
Not affected
8.04 LTS hardy
Fixed 2.8.2-0ubuntu8.1
7.10 gutsy
Fixed 2.7.7.dfsg.1-0ubuntu5.1
7.04 feisty Ignored end of life, was needed
6.06 LTS dapper
Fixed 0.9.7-4ubuntu1.1

Notes

mdeslaur

code was removed in upstream 2.8.4

References

Related Ubuntu Security Notices (USN)

    • USN-674-1
    • HPLIP vulnerabilities
    • 19 November 2008
    • USN-674-2
    • HPLIP vulnerabilities
    • 24 November 2008

Other references