A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sane | Aug 22, 2024 | Jun 24, 2020 |
| Debian | — | Upgrade sane-backends | Jul 30, 2024 | Jun 24, 2020 |
| Freebsd | — | Upgrade sane-backends | May 29, 2020 | May 28, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 24, 2020 |
| Suse | — | Upgrade sane-backends-32bitUpgrade sane-backends-autoconfigUpgrade sane-backends-devel-32bitUpgrade sane-backendsUpgrade sane-backends-devel | Nov 1, 2020 | May 17, 2020 |
| Ubuntu | — | Upgrade libsaneUpgrade libsane1 | Aug 25, 2020 | May 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub