CVE-2011-2722
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing ...
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
Exploit likelihood
What each source reports
NVD Score used
1.2
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
- Record
CVE-2011-2722- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:N/I:P/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
- Record
CVE-2011-2722- Updated
- 2026-11-02
EUVDEUVD-2011-2700 No score
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
- Record
EUVD-2011-2700- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mqf8-fvgr-vqf4 No score
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing ...
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
- Record
GHSA-mqf8-fvgr-vqf4- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
- Record
CVE-2011-2722- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-2722 No score
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
- Record
DEBIAN-CVE-2011-2722- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10083-1 No score
hplip-3.16.10-1.1 on GA media
These are all security issues fixed in the hplip-3.16.10-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10083-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
hplipDebian:12 |
before 3.11.10-1 | 3.11.10-1 |
hplipDebian:13 |
before 3.11.10-1 | 3.11.10-1 |
hpijs3Red Hat:enterprise_linux:5::client |
before 1:3.9.8-15.el5 | 1:3.9.8-15.el5 |
hplip3Red Hat:enterprise_linux:5::client |
before 0:3.9.8-15.el5 | 0:3.9.8-15.el5 |
hplip3-commonRed Hat:enterprise_linux:5::client |
before 0:3.9.8-15.el5 | 0:3.9.8-15.el5 |
hplip3-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.9.8-15.el5 | 0:3.9.8-15.el5 |
hplip3-guiRed Hat:enterprise_linux:5::client |
before 0:3.9.8-15.el5 | 0:3.9.8-15.el5 |
hplip3-libsRed Hat:enterprise_linux:5::client |
before 0:3.9.8-15.el5 | 0:3.9.8-15.el5 |
libsane-hpaio3Red Hat:enterprise_linux:5::client |
before 0:3.9.8-15.el5 | 0:3.9.8-15.el5 |
hpijs3Red Hat:enterprise_linux:5::server |
before 1:3.9.8-15.el5 | 1:3.9.8-15.el5 |
Show 28 moreShow less
| Package | Affected | Fixed |
|---|---|---|
hplip3Red Hat:enterprise_linux:5::server |
before 0:3.9.8-15.el5 | 0:3.9.8-15.el5 |
hplip3-commonRed Hat:enterprise_linux:5::server |
before 0:3.9.8-15.el5 | 0:3.9.8-15.el5 |
hplip3-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.9.8-15.el5 | 0:3.9.8-15.el5 |
hplip3-guiRed Hat:enterprise_linux:5::server |
before 0:3.9.8-15.el5 | 0:3.9.8-15.el5 |
hplip3-libsRed Hat:enterprise_linux:5::server |
before 0:3.9.8-15.el5 | 0:3.9.8-15.el5 |
libsane-hpaio3Red Hat:enterprise_linux:5::server |
before 0:3.9.8-15.el5 | 0:3.9.8-15.el5 |
hpijsRed Hat:enterprise_linux:6::client |
before 1:3.12.4-4.el6 | 1:3.12.4-4.el6 |
hplipRed Hat:enterprise_linux:6::client |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-commonRed Hat:enterprise_linux:6::client |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-debuginfoRed Hat:enterprise_linux:6::client |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-guiRed Hat:enterprise_linux:6::client |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-libsRed Hat:enterprise_linux:6::client |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
libsane-hpaioRed Hat:enterprise_linux:6::client |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hpijsRed Hat:enterprise_linux:6::server |
before 1:3.12.4-4.el6 | 1:3.12.4-4.el6 |
hplipRed Hat:enterprise_linux:6::server |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-commonRed Hat:enterprise_linux:6::server |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-debuginfoRed Hat:enterprise_linux:6::server |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-guiRed Hat:enterprise_linux:6::server |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-libsRed Hat:enterprise_linux:6::server |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
libsane-hpaioRed Hat:enterprise_linux:6::server |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hpijsRed Hat:enterprise_linux:6::workstation |
before 1:3.12.4-4.el6 | 1:3.12.4-4.el6 |
hplipRed Hat:enterprise_linux:6::workstation |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-commonRed Hat:enterprise_linux:6::workstation |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-guiRed Hat:enterprise_linux:6::workstation |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplip-libsRed Hat:enterprise_linux:6::workstation |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
libsane-hpaioRed Hat:enterprise_linux:6::workstation |
before 0:3.12.4-4.el6 | 0:3.12.4-4.el6 |
hplipopenSUSE:Tumbleweed |
before 3.16.10-1.1 | 3.16.10-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2722 is a low vulnerability (CVSS 1.2) in Hp Linux Imaging And Printing Project, published May 25, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in hplip 3.11.10-1.
References
bugzilla.novell.com/show_bug.cgi?id=704608
secunia.com/advisories/55083
ubuntu.com/usn/USN-1981-1
rhn.redhat.com/errata/RHSA-2013-0133.html
bugs.launchpad.net/hplip/+bug/809904
bugzilla.redhat.com/attachment.cgi?id=515866&action=diff
Show 30 moreShow less
hplipopensource.com/hplip-web/release_notes.html
bugzilla.redhat.com/show_bug.cgi?id=725830
security.gentoo.org/glsa/glsa-201203-17.xml
openwall.com/lists/oss-security/2011/07/26/14
secunia.com/advisories/48441
nvd.nist.gov/vuln/detail/CVE-2011-2722
access.redhat.com/errata/RHSA-2013:0133
access.redhat.com/errata/RHSA-2013:0500
access.redhat.com/security/cve/CVE-2011-2722
github.com/advisories/GHSA-mqf8-fvgr-vqf4
security-tracker.debian.org/tracker/CVE-2011-2722
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=501834
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0133.json
cve.org/CVERecord?id=CVE-2011-2722
bugzilla.redhat.com/show_bug.cgi?id=683007
bugzilla.redhat.com/show_bug.cgi?id=731900
bugzilla.redhat.com/show_bug.cgi?id=902163
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0500.json
access.redhat.com/security/cve/CVE-2013-0200
cve.org/CVERecord?id=CVE-2013-0200
nvd.nist.gov/vuln/detail/CVE-2013-0200
suse.com/security/cve/CVE-2004-0801
suse.com/security/cve/CVE-2010-4267
suse.com/security/cve/CVE-2011-2697
suse.com/security/cve/CVE-2011-2722
suse.com/security/cve/CVE-2013-4325
suse.com/security/cve/CVE-2013-6402
suse.com/security/cve/CVE-2013-6427
suse.com/security/cve/CVE-2015-0839