CVE-2015-0839

The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads.

• CWE-320

• http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162442.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162880.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2015/05/29/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/74913Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2699-1Third Party Advisory
• https://bugs.launchpad.net/hplip/+bug/1432516Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1227252Issue Tracking, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162442.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162880.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2015/05/29/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/74913Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2699-1Third Party Advisory
• https://bugs.launchpad.net/hplip/+bug/1432516Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1227252Issue Tracking, Third Party Advisory

Published

Aug 2, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0833Multiple untrusted search path vulnerabilities in updater.ex…
• CVE-2015-0834The WebRTC subsystem in Mozilla Firefox before 36.0 recogniz…
• CVE-2015-0835Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2015-0836Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2015-0837The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG be…5.9
• CVE-2015-0838Buffer overflow in the C implementation of the apply_delta f…
• CVE-2015-0840The dpkg-source command in Debian dpkg before 1.16.16 and 1.…
• CVE-2015-0841Off-by-one error in the readBuf function in listener.cpp in …7.5
• CVE-2015-0842yubiserver before 0.6 is prone to SQL injection issues, pote…9.8
• CVE-2015-0843yubiserver before 0.6 is prone to buffer overflows due to mi…9.8
• CVE-2015-0844The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x a…
• CVE-2015-0845Format string vulnerability in Movable Type Pro, Open Source…