Every CVE Search/ Get API key

CVE-2013-4325

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through...

6.9 MediumFix available

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.

Exploit likelihood

0.42%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.9

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.

Record
CVE-2013-4325
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.

Record
CVE-2013-4325
Updated
2026-11-02
EUVDEUVD-2013-4212 No score

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.

Record
EUVD-2013-4212
Updated
2026-11-03
GitHub AdvisoriesGHSA-7hxg-9wxx-g3mp No score

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through...

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.

Record
GHSA-7hxg-9wxx-g3mp
Updated
2026-11-02
OSV No score

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.

Record
CVE-2013-4325
Updated
2026-11-02
OSVDEBIAN-CVE-2013-4325 No score

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.

Record
DEBIAN-CVE-2013-4325
Updated
2026-11-02
OSVMGASA-2013-0293 No score

Updated polkit package and the packages that call polkit fixes security vulnerability

A race condition was found in the way the PolicyKit pkcheck utility checked process authorization when the process was specified by its process ID via the --process option. A local user could use this flaw to bypass intended PolicyKit authorizations and escalate their privileges (CVE-2013-4288).

Note: Applications that invoke pkcheck with the --process option need to be modified to use the pid,pid-start-time,uid argument for that option, to allow pkcheck to check process authorization correctly.

Because of the change in the PolicyKit API, the spice-gtk (CVE-2013-4324), hplip (CVE-2013-4325), rtkit (CVE-2013-4326), and systemd (CVE-2013-4327) packages have been updated to use a different API that is not affected by this PolicyKit vulnerability. The libvirt package will also be updated for the same reason, but this update will come in a separate advisory.

Record
MGASA-2013-0293
Updated
2026-11-02
OSVopenSUSE-SU-2024:10083-1 No score

hplip-3.16.10-1.1 on GA media

These are all security issues fixed in the hplip-3.16.10-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10083-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
hplip
Debian:12
 before 3.13.9-1
3.13.9-1
hplip
Debian:13
 before 3.13.9-1
3.13.9-1
hplip
Debian:6.0
From an advisory covering 4 CVEs
 before 3.10.6-2+squeeze2, plus listed versions
3.10.6-23.10.6-2+squeeze1
3.10.6-2+squeeze2
hplip
Debian:7
From an advisory covering 4 CVEs
 before 3.12.6-3.1+deb7u1, plus listed versions
3.12.6-3.1
3.12.6-3.1+deb7u1
polkit
Mageia:2
From an advisory covering 5 CVEs
 before 0.104-4.2.mga2
0.104-4.2.mga2
spice-gtk
Mageia:2
From an advisory covering 5 CVEs
 before 0.9-1.2.mga2
0.9-1.2.mga2
hplip
Mageia:2
From an advisory covering 5 CVEs
 before 3.12.4-1.3.mga2
3.12.4-1.3.mga2
rtkit
Mageia:2
From an advisory covering 5 CVEs
 before 0.10-3.1.mga2
0.10-3.1.mga2
systemd
Mageia:2
From an advisory covering 5 CVEs
 before 44-13.1.mga2
44-13.1.mga2
polkit
Mageia:3
From an advisory covering 5 CVEs
 before 0.107-6.1.mga3
0.107-6.1.mga3
Show 26 moreShow less
Affected packages
PackageAffectedFixed
spice-gtk
Mageia:3
From an advisory covering 5 CVEs
 before 0.15-3.1.mga3
0.15-3.1.mga3
hplip
Mageia:3
From an advisory covering 5 CVEs
 before 3.12.9-6.1.mga3
3.12.9-6.1.mga3
rtkit
Mageia:3
From an advisory covering 5 CVEs
 before 0.11-3.1.mga3
0.11-3.1.mga3
systemd
Mageia:3
From an advisory covering 5 CVEs
 before 195-22.1.mga3
195-22.1.mga3
hpijs
Red Hat:enterprise_linux:6::client
 before 1:3.12.4-4.el6_4.1
1:3.12.4-4.el6_4.1
hplip
Red Hat:enterprise_linux:6::client
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hplip-common
Red Hat:enterprise_linux:6::client
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hplip-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hplip-gui
Red Hat:enterprise_linux:6::client
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hplip-libs
Red Hat:enterprise_linux:6::client
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
libsane-hpaio
Red Hat:enterprise_linux:6::client
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hpijs
Red Hat:enterprise_linux:6::server
 before 1:3.12.4-4.el6_4.1
1:3.12.4-4.el6_4.1
hplip
Red Hat:enterprise_linux:6::server
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hplip-common
Red Hat:enterprise_linux:6::server
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hplip-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hplip-gui
Red Hat:enterprise_linux:6::server
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hplip-libs
Red Hat:enterprise_linux:6::server
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
libsane-hpaio
Red Hat:enterprise_linux:6::server
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hpijs
Red Hat:enterprise_linux:6::workstation
 before 1:3.12.4-4.el6_4.1
1:3.12.4-4.el6_4.1
hplip
Red Hat:enterprise_linux:6::workstation
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hplip-common
Red Hat:enterprise_linux:6::workstation
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hplip-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hplip-gui
Red Hat:enterprise_linux:6::workstation
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hplip-libs
Red Hat:enterprise_linux:6::workstation
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
libsane-hpaio
Red Hat:enterprise_linux:6::workstation
 before 0:3.12.4-4.el6_4.1
0:3.12.4-4.el6_4.1
hplip
openSUSE:Tumbleweed
From an advisory covering 8 CVEs
 before 3.16.10-1.1
3.16.10-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-4325 is a medium vulnerability (CVSS 6.9) in Hp Linux Imaging And Printing Project, published September 23, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in hplip 3.13.9-1.

References

Show 23 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open