An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-082.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-sane | Jan 4, 2021 | Jun 24, 2020 | |
| Debian | debian-upgrade-sane-backends | Aug 19, 2020 | Jun 24, 2020 | |
| Freebsd | freebsd-upgrade-package-sane-backends | May 29, 2020 | May 28, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-sane-backendshuawei-euleros-2_0_sp8-upgrade-sane-backends-develhuawei-euleros-2_0_sp8-upgrade-sane-backends-drivers-camerashuawei-euleros-2_0_sp8-upgrade-sane-backends-drivers-scannershuawei-euleros-2_0_sp8-upgrade-sane-backends-libs | Apr 26, 2022 | Jun 24, 2020 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Jun 24, 2020 |
| Suse | — | suse-upgrade-sane-backendssuse-upgrade-sane-backends-32bitsuse-upgrade-sane-backends-autoconfigsuse-upgrade-sane-backends-develsuse-upgrade-sane-backends-devel-32bit | Nov 1, 2020 | May 17, 2020 |
| Ubuntu | ubuntu-upgrade-libsaneubuntu-upgrade-libsane1 | Aug 25, 2020 | May 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub