A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-080.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sane-backends-docUpgrade sane-backendsUpgrade sane-backends-develUpgrade sane-backends-drivers-camerasUpgrade sane-backends-drivers-scannersUpgrade sane-backends-libsUpgrade sane-backends-daemon | May 4, 2022 | Jun 24, 2020 |
| Alpine Linux | — | Upgrade sane | Aug 22, 2024 | Jun 24, 2020 |
| Centos_linux | — | Upgrade sane-backends-docUpgrade sane-backends-drivers-camerasUpgrade sane-backendsUpgrade sane-backends-libs-debuginfoUpgrade sane-backends-debuginfoUpgrade sane-backends-develUpgrade sane-backends-drivers-scanners-debuginfoUpgrade sane-backends-daemon-debuginfoUpgrade sane-backends-daemonUpgrade sane-backends-drivers-cameras-debuginfoUpgrade sane-backends-drivers-scannersUpgrade sane-backends-debugsourceUpgrade sane-backends-libs | Jul 16, 2020 | Jun 24, 2020 |
| Debian | — | Upgrade sane-backends | Jul 30, 2024 | Jun 24, 2020 |
| Freebsd | — | Upgrade sane-backends | May 29, 2020 | May 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sane-backends-develUpgrade sane-backendsUpgrade sane-backends-drivers-scannersUpgrade sane-backends-libsUpgrade sane-backends-drivers-cameras | Mar 29, 2022 | Jun 24, 2020 |
| Oracle_linux | — | Upgrade sane-backends-libsUpgrade sane-backendsUpgrade sane-backends-drivers-scannersUpgrade sane-backends-docUpgrade sane-backends-drivers-camerasUpgrade sane-backends-develUpgrade sane-backends-daemon | Jul 22, 2020 | May 17, 2020 |
| Redhat_linux | — | Upgrade sane-backends-debuginfoUpgrade sane-backendsUpgrade sane-backends-libs-debuginfoUpgrade sane-backends-drivers-scannersUpgrade sane-backends-daemonUpgrade sane-backends-drivers-scanners-debuginfoUpgrade sane-backends-daemon-debuginfoUpgrade sane-backends-libsUpgrade sane-backends-drivers-camerasUpgrade sane-backends-develUpgrade sane-backends-docUpgrade sane-backends-debugsourceUpgrade sane-backends-drivers-cameras-debuginfo | Jul 16, 2020 | Jun 24, 2020 |
| Suse | — | Upgrade sane-backends-devel-32bitUpgrade sane-backends-develUpgrade sane-backends-32bitUpgrade sane-backends-autoconfigUpgrade sane-backends | Nov 1, 2020 | May 17, 2020 |
| Ubuntu | — | Upgrade libsaneUpgrade libsane1 | Aug 25, 2020 | May 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub