16 results · Feed
-
Unscored —
Sane 1.2.1 heap bounds overwrite in init_options() from backend/test.c via a long init_mode string in a configuration f…
-
High 7.3
An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_atta…
-
Unscored —
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network a…
-
Unscored —
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network a…
-
Unscored —
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network a…
-
Unscored —
A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network …
-
Unscored —
A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network…
-
Unscored —
A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as …
-
Unscored —
A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected t…
-
Unscored —
saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CON…
-
Unscored —
saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before th…
-
Unscored —
saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cas…
-
Unscored —
saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cau…
-
Unscored —
saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections…
-
Unscored —
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before gettin…
-
Unscored —
saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT …