CVE-2019-6337 : For the printers listed a maliciously crafted print file might cause certain HP

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.

Published 2019-11-07 15:15:11

Updated 2020-08-24 17:37:01

Source HP Inc.

View at NVD, CVE.org

Products affected by CVE-2019-6337

HP » J6u57b Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:j6u57b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J6u57b » Version: N/A
HP » J9v82a Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:j9v82a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J9v82a » Version: N/A
HP » J9v82d Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:j9v82d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J9v82d » Version: N/A
HP » J6u55a Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:j6u55a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J6u55a » Version: N/A
HP » J6u55d Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:j6u55d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J6u55d » Version: N/A
HP » J9v80a Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:j9v80a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J9v80a » Version: N/A
HP » J9v80b Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:j9v80b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J9v80b » Version: N/A
HP » D3q15a Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q15a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q15a » Version: N/A
HP » D3q15b Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q15b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q15b » Version: N/A
HP » D3q15d Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q15d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q15d » Version: N/A
HP » D3q17a Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q17a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q17a » Version: N/A
HP » D3q17d Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q17d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q17d » Version: N/A
HP » D3q19a Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q19a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q19a » Version: N/A
HP » D3q19d Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q19d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q19d » Version: N/A
HP » D3q20a Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q20a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q20a » Version: N/A
HP » D3q20b Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q20b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q20b » Version: N/A
HP » D3q20c Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q20c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q20c » Version: N/A
HP » D3q20d Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q20d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q20d » Version: N/A
HP » D3q21a Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q21a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q21a » Version: N/A
HP » D3q21c Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q21c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q21c » Version: N/A
HP » D3q21d Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q21d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q21d » Version: N/A
HP » K9z76a Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:k9z76a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » K9z76a » Version: N/A
HP » K9z76d Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:k9z76d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » K9z76d » Version: N/A
HP » D3q16a Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q16a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q16a » Version: N/A
HP » D3q16d Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q16d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q16d » Version: N/A
HP » D9l63a Firmware
Versions before (<) 001.1937c
cpe:2.3:o:hp:d9l63a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D9l63a » Version: N/A
HP » D9l64a Firmware
Versions before (<) 001.1937c
cpe:2.3:o:hp:d9l64a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D9l64a » Version: N/A
HP » T0g70a Firmware
Versions before (<) 001.1937c
cpe:2.3:o:hp:t0g70a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » T0g70a » Version: N/A
HP » J3p68a Firmware
Versions before (<) 001.1937c
cpe:2.3:o:hp:j3p68a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J3p68a » Version: N/A
HP » J3p65a Firmware
Versions before (<) 001.1937c
cpe:2.3:o:hp:j3p65a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J3p65a » Version: N/A
HP » J6u57a Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:j6u57a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J6u57a » Version: N/A
HP » J6u51b Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:j6u51b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J6u51b » Version: N/A
HP » J9v78b Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:j9v78b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J9v78b » Version: N/A
HP » W2z52b Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:w2z52b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » W2z52b » Version: N/A
HP » D3q19b Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q19b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q19b » Version: N/A
HP » W2z53b Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:w2z53b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » W2z53b » Version: N/A
HP » 2dr21d Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:2dr21d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » 2dr21d » Version: N/A
HP » K9z74a Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:k9z74a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » K9z74a » Version: N/A
HP » K9z74d Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:k9z74d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » K9z74d » Version: N/A
HP » D3q21b Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:d3q21b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q21b » Version: N/A
HP » K9z76b Firmware
Versions before (<) 001.1937d
cpe:2.3:o:hp:k9z76b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » K9z76b » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-6337

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 29 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-6337

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
3.3	LOW	AV:L/AC:M/Au:N/C:P/I:N/A:P	3.4	4.9	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: Partial
5.2	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L	0.9	4.2	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: Low

References for CVE-2019-6337

https://support.hp.com/us-en/document/c06458150

HPSBPI03630 rev. 2 - HP Inkjet Printers - Buffer Overflow and Local Disclosure of Information | HP® Customer Support
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2019-6337

Products affected by CVE-2019-6337

Exploit prediction scoring system (EPSS) score for CVE-2019-6337

CVSS scores for CVE-2019-6337

References for CVE-2019-6337