HPSBHF03638 rev. 4 - Intel 2019.2 IPU BIOS Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple security vulnerabilities have been identified by Intel. Intel is releasing updates for BIOS, Voltage...

HP Printers Multiple Vulnerabilities (HPSBPI03630)

A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

HPSBHF03639 rev. 4 - Intel WIFI Drivers and Intel PROSet/Wireless WiFi Software Security Advisory

Potential Security Impact Escalation of privilege, denial of service, or information disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Multiple potential security vulnerabilities have been identified with Intel WIFI Drivers and Intel...

HPSBHF03637 rev. 3 - Intel 2019.2 IPU CSME SPS TXE AMT Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, or Information Disclosure Source: Intel, HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple security vulnerabilities have been identified by Intel. Intel is releasing updates for Intel®...

HPSBHF03636 rev. 4 - Intel 2019.2 IPU Graphics Driver Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, or Information Disclosure Source: Intel, HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple security vulnerabilities have been identified by Intel. Intel is releasing Intel® Graphics...

HPSBHF03635 rev. 3 - Intel 2019.2 IPU Ethernet 700 Series Controllers Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, or Information Disclosure Source: Intel, HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple potential security vulnerabilities have been identified with Intel® Ethernet 700 Series...

CVE-2019-6337

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...

Code injection

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...

CVE-2019-6337

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...

CVE-2019-6337

CVE-2019-6337 affects HP Inkjet printers via a maliciously crafted print file that can cause the device to assert and emit a core dump to a local device. Public details in HP’s advisory HPSBPI03630 (HP Inkjet Printers - Buffer Overflow and Local Disclosure of Information) confirm a Buffer Overflo...

CVE-2019-16284

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFIBOOTSERVICES structure might be overwritten by an attacker to execute arbitrary SM...

Privilege escalation

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFIBOOTSERVICES structure might be overwritten by an attacker to execute arbitrary SM...

CVE-2019-16284

CVE-2019-16284 concerns a BIOS/firmware vulnerability in HP products where the EFI_BOOT_SERVICES structure can be overwritten to execute arbitrary SMM code, potentially leading to privilege escalation during boot. The Red Hat and NVD entries align with HP’s advisory (HP: C06456250), describing af...

CVE-2019-16284

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFIBOOTSERVICES structure might be overwritten by an attacker to execute arbitrary SM...

HPESBUX03962 rev.2 - HP-UX NTP service, multiple vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Buffer Overflow; Remote: Compromise of System Integrity, Denial of Service DoS, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX NTP Software Prior to C.4.2.8.4.0 CVSS Scores: | CVE | CVSS Vector | Base...

CVE-2018-0733

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...

Survey Finds People are Privacy Hypocrites

Even while people remain concerned about their own privacy in the workplace and online, most still admit to violations of their coworkers’ privacy by “creeping” on PC screens and “peeking” at documents found in printer trays, a new survey has found. The survey—commissioned by HP as part of Nation...

CVE-2019-6334

HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow potential execution of arbitrary code...

Code injection

HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow potential execution of arbitrary code...

CVE-2019-6334

CVE-2019-6334 affects HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers. The issue concerns a signature-check mechanism for installed applications that may allow arbitrary code execution. The HP advisory (HP C06447795) confirms a risk of execution of arbitrary code and pr...