CVE-2015-0839

Name of the Vulnerable Software and Affected Versions HPLIP (affected versions not specified)

Description The issue is related to the hp-plugin utility in HPLIP, which uses a short GPG key id from a keyserver to verify print plugin downloads. This makes it easier for man-in-the-middle attackers to execute arbitrary code. The exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.