CVE-2020-6923 HP Linux Imaging and Printing Software - Potential Memory Buffer Overflow
A memory buffer overflow in HP Linux Imaging and Printing software could allow attackers to execute arbitrary code or cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2020-6923?
CVE-2020-6923 is a medium-severity memory corruption vulnerability in HP Linux Imaging and Printing Software, published on 19 Dec 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow.
Weakness: CWE-120
Which versions are affected by CVE-2020-6923?
Linux distribution packages (16)
hplip SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | All versions | 3.24.4-150400.3.17.1 |
hplip SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | All versions | 3.24.4-150400.3.17.1 |
hplip SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | All versions | 3.24.4-150400.3.17.1 |
hplip SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | All versions | 3.24.4-150400.3.17.1 |
hplip SUSE:Linux Enterprise Module for Basesystem 15 SP6 | All versions | 3.24.4-150600.4.6.1 |
hplip SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 | All versions | 3.24.4-150600.4.6.1 |
hplip SUSE:Linux Enterprise Server 12 SP5-LTSS | All versions | 3.24.4-3.5.1 |
hplip SUSE:Linux Enterprise Server 15 SP4-LTSS | All versions | 3.24.4-150400.3.17.1 |
hplip SUSE:Linux Enterprise Server 15 SP5-LTSS | All versions | 3.24.4-150400.3.17.1 |
hplip SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | All versions | 3.24.4-3.5.1 |
hplip SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | All versions | 3.24.4-150400.3.17.1 |
hplip SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | All versions | 3.24.4-150400.3.17.1 |
hplip SUSE:Manager Proxy 4.3 | All versions | 3.24.4-150400.3.17.1 |
hplip SUSE:Manager Server 4.3 | All versions | 3.24.4-150400.3.17.1 |
hplip openSUSE:Leap 15.6 | All versions | 3.24.4-150600.4.6.1 |
hplip openSUSE:Tumbleweed | All versions | 3.24.4-4.1 |
How do I fix CVE-2020-6923?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-6923 being exploited?
There is no known exploitation of CVE-2020-6923 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2020-6923, GHSA-v356-2ghm-7mwq, OESA-2025-1010, OESA-2025-1011, OESA-2025-1012, OESA-2025-1013 and 6 more.