VIR Vulnerability Intelligence Relay

CVE-2012-6108

low
Published 2014-02-15 · Modified 2026-04-29
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
2.1

Description

HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

OS impact
debian Debian Fixed 4 releases
VersionStatusFixed in
trixie Fixed 0
sid Fixed 0
bullseye Fixed 0
bookworm Fixed 0

Application impact
VendorProductVersionsFixed
hp hplinux_imaging_and_printing_project{"endIncluding":"3.13.1"}
hp hplinux_imaging_and_printing_project1.0
hp hplinux_imaging_and_printing_project2.0
hp hplinux_imaging_and_printing_project2.7.10
hp hplinux_imaging_and_printing_project3.9.2
hp hplinux_imaging_and_printing_project3.9.4
hp hplinux_imaging_and_printing_project3.9.4b
hp hplinux_imaging_and_printing_project3.9.6
hp hplinux_imaging_and_printing_project3.9.8
hp hplinux_imaging_and_printing_project3.9.10
hp hplinux_imaging_and_printing_project3.9.12
hp hplinux_imaging_and_printing_project3.10.2
hp hplinux_imaging_and_printing_project3.10.5
hp hplinux_imaging_and_printing_project3.10.6
hp hplinux_imaging_and_printing_project3.10.9
hp hplinux_imaging_and_printing_project3.11.1
hp hplinux_imaging_and_printing_project3.11.3
hp hplinux_imaging_and_printing_project3.11.3a
hp hplinux_imaging_and_printing_project3.11.5
hp hplinux_imaging_and_printing_project3.11.7
hp hplinux_imaging_and_printing_project3.11.10
hp hplinux_imaging_and_printing_project3.12.2
hp hplinux_imaging_and_printing_project3.12.4
hp hplinux_imaging_and_printing_project3.12.6
hp hplinux_imaging_and_printing_project3.12.9
hp hplinux_imaging_and_printing_project3.12.10
hp hplinux_imaging_and_printing_project3.12.11

References

CWEs

CWE-264

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.