CVE-2025-43023 HP Linux Imaging and Printing Software - Use of DSA Key
The HP Linux Imaging and Printing Software uses a weak DSA code signing key, potentially allowing attackers to bypass signature verification checks.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-43023?
CVE-2025-43023 is a medium-severity vulnerability in HP, Inc. HP Linux Imaging and Printing Software, published on 28 Jul 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).
Weakness: CWE-347
Which versions are affected by CVE-2025-43023?
It affects 1 product.
Products include Hp Linux Imaging and Printing.
How do I fix CVE-2025-43023?
Apply the vendor's patch.
Is CVE-2025-43023 being exploited?
There is no known exploitation of CVE-2025-43023 in the wild and no public exploit code.
Other vulnerabilities in HP, Inc. HP Linux Imaging and Printing Software
- CVE-2026-91104 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
- CVE-2026-91106 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
- CVE-2026-8631 HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution
- CVE-2026-91098 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
- CVE-2026-91105 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
Sources
Also known as GHSA-f9vh-cwpr-5m8f, UBUNTU-CVE-2025-43023.