Lucene search
K

658 matches found

CVE
CVE
added 2020/06/01 1:50 p.m.273 views

CVE-2020-12867

CVE-2020-12867 involves a NULL pointer dereference in sanei_epson_net_read within SANE backends prior to 1.0.30. A malicious device on the same local network could trigger a denial of service. The connected Debian/AlmaLinux advisories and Fedora/Alpine notes indicate the issue affects sane-backen...

5.5CVSS5.4AI score0.00497EPSS
Exploits1References9Affected Software1
Cvelist
Cvelist
added 2020/06/01 1:50 p.m.17 views

CVE-2020-12867

A NULL pointer dereference in saneiepsonnetread in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075...

5.5AI score0.00497EPSS
Exploits1References9
Debian CVE
Debian CVE
added 2020/06/01 1:50 p.m.22 views

CVE-2020-12867

A NULL pointer dereference in saneiepsonnetread in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075...

5.5CVSS6.3AI score0.00497EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2020/06/01 1:50 p.m.42 views

CVE-2020-12867

A NULL pointer dereference in saneiepsonnetread in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075...

5.5CVSS5.7AI score0.00497EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2020/06/01 12:0 a.m.40 views

Debian DLA-2231-1 : sane-backends security update

Remote denial of service and several memory management issues were fixed in the epson2 driver. For Debian 8 'Jessie', this problem has been fixed in version 1.0.24-8+deb8u3. We recommend that you upgrade your sane-backends packages if you are using the epson2 driver. NOTE: Tenable Network Securit...

5.5CVSS6.2AI score0.00497EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2020/06/01 12:0 a.m.24 views

Debian: Security Advisory (DLA-2231-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6AI score0.00497EPSS
Exploits1References3
Debian
Debian
added 2020/05/31 9:20 p.m.58 views

[SECURITY] [DLA 2231-1] sane-backends security update

Package : sane-backends Version : 1.0.24-8+deb8u3 CVE ID : CVE-2020-12867 Debian Bug : 961302 Remote denial of service and several memory management issues were fixed in the epson2 driver. For Debian 8 "Jessie", this problem has been fixed in version 1.0.24-8+deb8u3. We recommend that you upgrade...

5.5CVSS5.8AI score0.00497EPSS
Exploits1
OSV
OSV
added 2020/05/31 12:0 a.m.30 views

DLA-2231-1 sane-backends - security update

Bulletin has no description...

5.5CVSS5.7AI score0.00497EPSS
Exploits1
CNVD
CNVD
added 2020/05/27 12:0 a.m.2 views

SANE Backends Buffer Overflow Vulnerability (CNVD-2020-41085)

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A buffer error vulnerability exists in the 'decodebinary' function in versions of SANE Backends prior to 1.0.30. A remote attacker could...

4.3CVSS7AI score0.01077EPSS
Exploits1References1
CNVD
CNVD
added 2020/05/27 12:0 a.m.1 views

SANE Backends Buffer Overflow Vulnerability (CNVD-2020-38892)

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A buffer overflow vulnerability exists in the 'epsondsnetread' function in versions of SANE Backends prior to 1.0.30. An attacker could...

8.8CVSS7.8AI score0.03044EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2020/05/22 12:0 a.m.3 views

PT-2020-6252 · Sane +4 · Sane-Backends +4

Name of the Vulnerable Software and Affected Versions: SANE Backends versions prior to 1.0.30 Description: The issue is related to an out-of-bounds read that may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of t...

8.8CVSS6.1AI score0.03044EPSS
Exploits7References89
Positive Technologies
Positive Technologies
added 2020/05/22 12:0 a.m.2 views

PT-2020-6251 · Sane +4 · Sane-Backends +4

Name of the Vulnerable Software and Affected Versions: SANE Backends versions prior to 1.0.30 Description: The issue is related to an out-of-bounds read in the SANE Backends interface, which provides access to scanning devices. This may allow a malicious device connected to the same local network...

8.8CVSS6.1AI score0.03044EPSS
Exploits7References90
Positive Technologies
Positive Technologies
added 2020/05/22 12:0 a.m.3 views

PT-2020-6253 · Sane +8 · Sane-Backends +8

Name of the Vulnerable Software and Affected Versions: SANE Backends versions prior to 1.0.30 Description: The issue is related to a NULL pointer dereference in the sanei epson net read function of the SANE Backends interface, which provides access to raster image scanning devices. This can be...

8.8CVSS6.1AI score0.03044EPSS
Exploits7References101
CNVD
CNVD
added 2020/05/21 12:0 a.m.2 views

SANE Backends Buffer Overflow Vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A buffer overflow vulnerability exists in the 'esci2img' function in versions of SANE Backends prior to 1.0.30. An attacker could exploit...

8CVSS7.8AI score0.01457EPSS
Exploits1References1
CNVD
CNVD
added 2020/05/21 12:0 a.m.4 views

SANE Backends Buffer Overflow Vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A buffer error vulnerability exists in SANE Backends. The vulnerability arises from a networked system or product performing operations o...

4.3CVSS7.4AI score0.01006EPSS
Exploits1References1
CNVD
CNVD
added 2020/05/21 12:0 a.m.2 views

SANE Backends epsonds component input validation error vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. An input validation error vulnerability exists in the 'epsondsnetread' function in SANE Backends versions prior to 1.0.30. An attacker...

4.3CVSS6.8AI score0.01204EPSS
Exploits1References1
CNVD
CNVD
added 2020/05/21 12:0 a.m.2 views

SANE Backends Code Issue Vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A code issue vulnerability exists in the 'saneiepsonnetread' function in SANE Backends 1.0.29 and prior versions. An attacker could explo...

5.5CVSS7AI score0.00497EPSS
Exploits1References1
CNVD
CNVD
added 2020/05/21 12:0 a.m.2 views

SANE Backends Code Issue Vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A code issue vulnerability exists in the 'epsondsnetread' function in SANE Backends versions prior to 1.0.30. The vulnerability stems fro...

5.7CVSS7.1AI score0.01041EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2020/05/17 12:0 a.m.2 views

PT-2020-2804 · Sane +6 · Sane-Backends +6

Name of the Vulnerable Software and Affected Versions: SANE Backends versions prior to 1.0.30 Description: A heap buffer overflow in SANE Backends may allow a malicious device connected to the same local network as the victim to execute arbitrary code. The issue is related to the epsonds componen...

8.8CVSS7.5AI score0.03044EPSS
Exploits7References96
FreeBSD
FreeBSD
added 2020/05/17 12:0 a.m.36 views

Sane -- Multiple Vulnerabilities

The Sane Project reports: epson2: fixes CVE-2020-12867 GHSL-2020-075 and several memory management issues found while addressing that CVE epsonds: addresses out-of-bound memory access issues to fix CVE-2020-12862 GHSL-2020-082 and CVE-2020-12863 GHSL-2020-083, addresses a buffer overflow fixing...

8.8CVSS2.7AI score0.03044EPSS
Exploits7References1
Rows per page
Query Builder