CVE-2011-2722: The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x b...

Security readout for executives and security teams

CVE-2011-2722 is a local file overwrite flaw in HPLIP, HP's Linux printer software. A local user could abuse insecure handling of a temporary file used by the fax printing component to overwrite files through a symbolic link. It is not described as remotely exploitable in the supplied sources. Exposure is most likely on Linux systems running HPLIP 3.x before 3.11.10, especially workstations or shared print hosts with HP printer or fax support installed. Systems without HPLIP, or with vendor-patched HPLIP packages, are not indicated as affected by the supplied sources. Treat this as a targeted hygiene issue, not an emergency internet-facing incident. Patch exposed multi-user Linux systems first, especially print infrastructure. The absence of KEV listing and remote exploitation evidence lowers urgency, but arbitrary local file overwrite remains meaningful on shared systems. Mitigation focus: Upgrade HPLIP to 3.11.10 or later where vendor packaging supports it.; Apply distribution security updates from Ubuntu, Red Hat, Gentoo, or the relevant Linux vendor.; Prioritize shared Linux print servers and multi-user workstations..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.