Summary
Kritphong Mongkhonvanit discovered that sane-backends incorrectly handled
certain packets. A remote attacker could possibly use this issue to obtain
sensitive memory information. This issue only affected Ubuntu 16.04 LTS.
(CVE-2017-6318)
It was discovered that sane-backends incorrectly handled certain memory
operations. A remote attacker could possibly use this issue to execute
arbitrary code. This issue only applied to Ubuntu 18.04 LTS and Ubuntu
20.04 LTS. (CVE-2020-12861)
It was discovered that sane-backends incorrectly handled certain memory
operations. A remote attacker could possibly use this issue to obtain
sensitive information. (CVE-2020-12862, CVE-2020-12863)
It was discovered that sane-backends incorrectly handled certain memory
operations. A remote attacker could possibly use this issue to obtain
sensitive information. This issue only applied to Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS. (CVE-2020-12864)
It was discovered that sane-backends incorrectly handled certain memory
operations. A remote attacker could possibly use this issue to execute
arbitrary code. (CVE-2020-12865)
It was discovered that sane-backends incorrectly handled certain memory
operations. A remote attacker could possibly use this issue to cause a
denial of service. This issue only applied to Ubuntu 18.04 LTS and Ubuntu
20.04 LTS. (CVE-2020-12866)
It was discovered that sane-backends incorrectly handled certain memory
operations. A remote attacker could possibly use this issue to cause a
denial of service. (CVE-2020-12867)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | sane-backends | 1.0.25+git20150528-1ubuntu2.16.04.3 |
| Ubuntu · 18.04 LTS 18.04:LTS | sane-backends | 1.0.27-1~experimental3ubuntu2.3 |
| Ubuntu · 20.04 LTS 20.04:LTS | sane-backends | 1.0.29-0ubuntu5.1 |
Vulnerabilities 8
-
Unscored —
saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CON…
-
Unscored —
A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as …
-
Unscored —
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network a…
-
Unscored —
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network a…
-
Unscored —
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network a…
-
Unscored —
A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network …
-
Unscored —
A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network…
-
Unscored —
A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected t…
References
-
report
https://ubuntu.com/security/CVE-2017-6318
-
report
https://ubuntu.com/security/CVE-2020-12861
-
report
https://ubuntu.com/security/CVE-2020-12862
-
report
https://ubuntu.com/security/CVE-2020-12863
-
report
https://ubuntu.com/security/CVE-2020-12864
-
report
https://ubuntu.com/security/CVE-2020-12865
-
report
https://ubuntu.com/security/CVE-2020-12866
-
report
https://ubuntu.com/security/CVE-2020-12867