CVE-2024-9423 Certain HP LaserJet Printers – Potential Denial of Service
Attackers can cause a denial of service on HP LaserJet printers by sending raw JPEG files, blocking queued print jobs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-9423?
CVE-2024-9423 is a medium-severity denial of service vulnerability in Certain HP LaserJet Printers, published on 2 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Certain HP LaserJet printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer. The printer displays a “JPEG Unsupported” message which may not clear, potentially blocking queued print jobs.
Weakness: CWE-241
Which versions are affected by CVE-2024-9423?
It affects 102 products.
Products include Hp 1y7d4a Firmware, Hp 2a129a Firmware, Hp 2a130a Firmware, Hp 2a130e Firmware, Hp 2r3e1a Firmware, Hp 2r3e2a Firmware and 96 more.
How do I fix CVE-2024-9423?
No fix has been published for CVE-2024-9423 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-9423 being exploited?
There is no known exploitation of CVE-2024-9423 in the wild and no public exploit code.
Other vulnerabilities in Certain HP LaserJet Printers
Sources
Also known as GHSA-mc6f-8j7w-q9xw.