CVE-2010-4267
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard...
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
Exploit likelihood
What each source reports
NVD Score used
7.5
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
- Record
CVE-2010-4267- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
- Record
CVE-2010-4267- Updated
- 2026-11-02
EUVDEUVD-2010-4240 No score
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
- Record
EUVD-2010-4240- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9c9p-hhrq-f5v5 No score
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard...
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
- Record
GHSA-9c9p-hhrq-f5v5- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
- Record
CVE-2010-4267- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-4267 No score
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
- Record
DEBIAN-CVE-2010-4267- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10083-1 No score
hplip-3.16.10-1.1 on GA media
These are all security issues fixed in the hplip-3.16.10-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10083-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
hplipDebian:12 |
before 3.10.6-2 | 3.10.6-2 |
hplipDebian:13 |
before 3.10.6-2 | 3.10.6-2 |
hplipDebian:5.0 |
before 2.8.6.b-4+lenny1, plus listed versions 2.8.6.b-4 |
2.8.6.b-4+lenny1 |
hpijsRed Hat:enterprise_linux:5::server |
before 1:1.6.7-6.el5_6.1 | 1:1.6.7-6.el5_6.1 |
hpijs3Red Hat:enterprise_linux:5::server |
before 1:3.9.8-11.el5_6.1 | 1:3.9.8-11.el5_6.1 |
hplipRed Hat:enterprise_linux:5::server |
before 0:1.6.7-6.el5_6.1 | 0:1.6.7-6.el5_6.1 |
hplip-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.6.7-6.el5_6.1 | 0:1.6.7-6.el5_6.1 |
hplip3Red Hat:enterprise_linux:5::server |
before 0:3.9.8-11.el5_6.1 | 0:3.9.8-11.el5_6.1 |
hplip3-commonRed Hat:enterprise_linux:5::server |
before 0:3.9.8-11.el5_6.1 | 0:3.9.8-11.el5_6.1 |
hplip3-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.9.8-11.el5_6.1 | 0:3.9.8-11.el5_6.1 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
hplip3-guiRed Hat:enterprise_linux:5::server |
before 0:3.9.8-11.el5_6.1 | 0:3.9.8-11.el5_6.1 |
hplip3-libsRed Hat:enterprise_linux:5::server |
before 0:3.9.8-11.el5_6.1 | 0:3.9.8-11.el5_6.1 |
libsane-hpaioRed Hat:enterprise_linux:5::server |
before 0:1.6.7-6.el5_6.1 | 0:1.6.7-6.el5_6.1 |
libsane-hpaio3Red Hat:enterprise_linux:5::server |
before 0:3.9.8-11.el5_6.1 | 0:3.9.8-11.el5_6.1 |
hpijsRed Hat:enterprise_linux:6::client |
before 1:3.9.8-33.el6_0.1 | 1:3.9.8-33.el6_0.1 |
hplipRed Hat:enterprise_linux:6::client |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hplip-commonRed Hat:enterprise_linux:6::client |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hplip-debuginfoRed Hat:enterprise_linux:6::client |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hplip-guiRed Hat:enterprise_linux:6::client |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hplip-libsRed Hat:enterprise_linux:6::client |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
libsane-hpaioRed Hat:enterprise_linux:6::client |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hpijsRed Hat:enterprise_linux:6::server |
before 1:3.9.8-33.el6_0.1 | 1:3.9.8-33.el6_0.1 |
hplipRed Hat:enterprise_linux:6::server |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hplip-commonRed Hat:enterprise_linux:6::server |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hplip-debuginfoRed Hat:enterprise_linux:6::server |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hplip-guiRed Hat:enterprise_linux:6::server |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hplip-libsRed Hat:enterprise_linux:6::server |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
libsane-hpaioRed Hat:enterprise_linux:6::server |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hpijsRed Hat:enterprise_linux:6::workstation |
before 1:3.9.8-33.el6_0.1 | 1:3.9.8-33.el6_0.1 |
hplipRed Hat:enterprise_linux:6::workstation |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hplip-commonRed Hat:enterprise_linux:6::workstation |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hplip-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hplip-guiRed Hat:enterprise_linux:6::workstation |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hplip-libsRed Hat:enterprise_linux:6::workstation |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
libsane-hpaioRed Hat:enterprise_linux:6::workstation |
before 0:3.9.8-33.el6_0.1 | 0:3.9.8-33.el6_0.1 |
hplipopenSUSE:Tumbleweed From an advisory covering 8 CVEs |
before 3.16.10-1.1 | 3.16.10-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4267 is a high vulnerability (CVSS 7.5) in Hp Linux Imaging And Printing Project, published January 20, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.8%, the 95th percentile. Fixed in hplip 3.10.6-2.
References
secunia.com/advisories/42956
secunia.com/advisories/43068
osvdb.org/70498
secunia.com/advisories/43102
vupen.com/english/advisories/2011/0136
vupen.com/english/advisories/2011/0212
Show 38 moreShow less
securityfocus.com/bid/45833
secunia.com/advisories/43022
vupen.com/english/advisories/2011/0228
bugzilla.redhat.com/attachment.cgi?id=468455&action=diff
lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
vupen.com/english/advisories/2011/0211
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
lists.fedoraproject.org/pipermail/package-announce/2011-January/053474.html
mandriva.com/security/advisories?name=MDVSA-2011:013
redhat.com/support/errata/RHSA-2011-0154.html
vupen.com/english/advisories/2011/0243
ubuntu.com/usn/USN-1051-1
secunia.com/advisories/43083
exchange.xforce.ibmcloud.com/vulnerabilities/64738
vupen.com/english/advisories/2011/0160
debian.org/security/2011/dsa-2152
lists.fedoraproject.org/pipermail/package-announce/2011-January/053472.html
security.gentoo.org/glsa/glsa-201203-17.xml
securitytracker.com/id?1024967
secunia.com/advisories/42939
secunia.com/advisories/48441
bugzilla.redhat.com/show_bug.cgi?id=662740
nvd.nist.gov/vuln/detail/CVE-2010-4267
github.com/advisories/GHSA-9c9p-hhrq-f5v5
security-tracker.debian.org/tracker/CVE-2010-4267
access.redhat.com/errata/RHSA-2011:0154
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0154.json
access.redhat.com/security/cve/CVE-2010-4267
cve.org/CVERecord?id=CVE-2010-4267
suse.com/security/cve/CVE-2004-0801
suse.com/security/cve/CVE-2010-4267
suse.com/security/cve/CVE-2011-2697
suse.com/security/cve/CVE-2011-2722
suse.com/security/cve/CVE-2013-4325
suse.com/security/cve/CVE-2013-6402
suse.com/security/cve/CVE-2013-6427
suse.com/security/cve/CVE-2015-0839