A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sane-backends-docUpgrade sane-backends-develUpgrade sane-backendsUpgrade sane-backends-daemonUpgrade sane-backends-drivers-camerasUpgrade sane-backends-libsUpgrade sane-backends-drivers-scanners | May 4, 2022 | Jun 24, 2020 |
| Alpine Linux | — | Upgrade sane | Jan 4, 2021 | Jun 24, 2020 |
| Centos_linux | — | Upgrade sane-backends-debuginfoUpgrade sane-backends-drivers-camerasUpgrade sane-backends-libs-debuginfoUpgrade sane-backends-docUpgrade sane-backends-drivers-scannersUpgrade sane-backendsUpgrade sane-backends-daemonUpgrade sane-backends-libsUpgrade sane-backends-drivers-scanners-debuginfoUpgrade sane-backends-develUpgrade sane-backends-debugsourceUpgrade sane-backends-daemon-debuginfoUpgrade sane-backends-drivers-cameras-debuginfo | Jul 16, 2020 | Jun 24, 2020 |
| Debian | — | Upgrade sane-backends | Aug 19, 2020 | Jun 24, 2020 |
| Freebsd | — | Upgrade sane-backends | May 29, 2020 | May 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sane-backends-drivers-scannersUpgrade sane-backends-drivers-camerasUpgrade sane-backends-libsUpgrade sane-backendsUpgrade sane-backends-devel | Mar 29, 2022 | Jun 24, 2020 |
| Oracle_linux | — | Upgrade sane-backends-develUpgrade sane-backends-libsUpgrade sane-backendsUpgrade sane-backends-docUpgrade sane-backends-daemonUpgrade sane-backends-drivers-camerasUpgrade sane-backends-drivers-scanners | Jul 22, 2020 | May 17, 2020 |
| Redhat_linux | — | Upgrade sane-backends-develUpgrade sane-backends-docUpgrade sane-backends-drivers-scanners-debuginfoUpgrade sane-backendsUpgrade sane-backends-debuginfoUpgrade sane-backends-debugsourceUpgrade sane-backends-libsUpgrade sane-backends-daemon-debuginfoUpgrade sane-backends-drivers-cameras-debuginfoUpgrade sane-backends-drivers-camerasUpgrade sane-backends-daemonUpgrade sane-backends-drivers-scannersUpgrade sane-backends-libs-debuginfo | Jul 16, 2020 | Jun 24, 2020 |
| Suse | — | Upgrade sane-backendsUpgrade sane-backends-devel-32bitUpgrade sane-backends-32bitUpgrade sane-backends-autoconfigUpgrade sane-backends-devel | Nov 1, 2020 | May 17, 2020 |
| Ubuntu | — | Upgrade libsane1Upgrade libsane | Aug 25, 2020 | May 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub