CVE-2011-2697
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to...
CVE-2011-2697 is a medium vulnerability (CVSS 6.8) in Hp Linux Imaging And Printing Project, published July 29, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.8%, the 95th percentile. Fixed in foomatic-filters 4.0.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 10.8%EPSS, 95th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
4.0foomatic-filters +19 more
Description
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
foomatic-filtersDebian:12 | before 4.0 | 4.0 |
foomatic-filtersDebian:13 | before 4.0 | 4.0 |
foomatic-filtersDebian:14 | before 4.0 | 4.0 |
hplipDebian:12 | before 3.10.6-2 | 3.10.6-2 |
hplipDebian:13 | before 3.10.6-2 | 3.10.6-2 |
foomatic-filtersDebian:6.0 From an advisory covering 2 CVEs | before 4.0.5-6+squeeze1, plus listed versions 4.0.5-6 | 4.0.5-6+squeeze1 |
foomatic-filtersDebian:5.0 From an advisory covering 2 CVEs | before 3.0.2-20080211-3.2+lenny1, plus listed versions 3.0.2-20080211-3.2 | 3.0.2-20080211-3.2+lenny1 |
foomaticRed Hat:enterprise_linux:4::as | before 0:3.0.2-3.2.el4 | 0:3.0.2-3.2.el4 |
foomatic-debuginfoRed Hat:enterprise_linux:4::as | before 0:3.0.2-3.2.el4 | 0:3.0.2-3.2.el4 |
foomaticRed Hat:enterprise_linux:4::desktop | before 0:3.0.2-3.2.el4 | 0:3.0.2-3.2.el4 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
foomatic-debuginfoRed Hat:enterprise_linux:4::desktop | before 0:3.0.2-3.2.el4 | 0:3.0.2-3.2.el4 |
foomaticRed Hat:enterprise_linux:4::es | before 0:3.0.2-3.2.el4 | 0:3.0.2-3.2.el4 |
foomatic-debuginfoRed Hat:enterprise_linux:4::es | before 0:3.0.2-3.2.el4 | 0:3.0.2-3.2.el4 |
foomaticRed Hat:enterprise_linux:4::ws | before 0:3.0.2-3.2.el4 | 0:3.0.2-3.2.el4 |
foomatic-debuginfoRed Hat:enterprise_linux:4::ws | before 0:3.0.2-3.2.el4 | 0:3.0.2-3.2.el4 |
foomaticRed Hat:enterprise_linux:5::client | before 0:3.0.2-38.3.el5_7.1 | 0:3.0.2-38.3.el5_7.1 |
foomatic-debuginfoRed Hat:enterprise_linux:5::client | before 0:3.0.2-38.3.el5_7.1 | 0:3.0.2-38.3.el5_7.1 |
foomaticRed Hat:enterprise_linux:5::server | before 0:3.0.2-38.3.el5_7.1 | 0:3.0.2-38.3.el5_7.1 |
foomatic-debuginfoRed Hat:enterprise_linux:5::server | before 0:3.0.2-38.3.el5_7.1 | 0:3.0.2-38.3.el5_7.1 |
hplipopenSUSE:Tumbleweed From an advisory covering 8 CVEs | before 3.16.10-1.1 | 3.16.10-1.1 |
What each source reports
NVD Score used
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.
- Record
CVE-2011-2697- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.
- Record
CVE-2011-2697- Updated
- 2026-11-02
EUVDEUVD-2011-2678No score
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.
- Record
EUVD-2011-2678- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fwm5-c4jq-p4wvNo score
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to...
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.
- Record
GHSA-fwm5-c4jq-p4wv- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.
- Record
CVE-2011-2697- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-2697No score
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.
- Record
DEBIAN-CVE-2011-2697- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10083-1No score
hplip-3.16.10-1.1 on GA media
These are all security issues fixed in the hplip-3.16.10-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10083-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
mandriva.com/security/advisories?name=MDVSA-2011:125
openwall.com/lists/oss-security/2011/07/18/3
exchange.xforce.ibmcloud.com/vulnerabilities/68993
bugzilla.redhat.com/show_bug.cgi?id=721001
Show 20 moreShow less
ubuntu.com/usn/USN-1194-1
bugzilla.novell.com/show_bug.cgi?id=698451
security.gentoo.org/glsa/glsa-201203-07.xml
xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
nvd.nist.gov/vuln/detail/CVE-2011-2697
github.com/advisories/GHSA-fwm5-c4jq-p4wv
security-tracker.debian.org/tracker/CVE-2011-2697
access.redhat.com/errata/RHSA-2011:1109
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1109.json
cve.org/CVERecord?id=CVE-2011-2697
suse.com/security/cve/CVE-2004-0801