SANE Backends Code Issue Vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A code issue vulnerability exists in the 'epsondsnetread' function in SANE Backends versions prior to 1.0.30. The vulnerability stems fro...

SANE Backends Buffer Overflow Vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A buffer overflow vulnerability exists in the 'esci2img' function in versions of SANE Backends prior to 1.0.30. An attacker could exploit...

SANE Backends Code Issue Vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A code issue vulnerability exists in the 'saneiepsonnetread' function in SANE Backends 1.0.29 and prior versions. An attacker could explo...

SANE Backends epsonds component input validation error vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. An input validation error vulnerability exists in the 'epsondsnetread' function in SANE Backends versions prior to 1.0.30. An attacker...

Sane -- Multiple Vulnerabilities

The Sane Project reports: epson2: fixes CVE-2020-12867 GHSL-2020-075 and several memory management issues found while addressing that CVE epsonds: addresses out-of-bound memory access issues to fix CVE-2020-12862 GHSL-2020-082 and CVE-2020-12863 GHSL-2020-083, addresses a buffer overflow fixing...

PT-2020-2804 · Sane +6 · Sane-Backends +6

Name of the Vulnerable Software and Affected Versions: SANE Backends versions prior to 1.0.30 Description: A heap buffer overflow in SANE Backends may allow a malicious device connected to the same local network as the victim to execute arbitrary code. The issue is related to the epsonds componen...

PT-2020-6486 · Unknown +6 · Sane-Backends +6

Name of the Vulnerable Software and Affected Versions: SANE Backends versions prior to 1.0.30 Description: A heap buffer overflow in the SANE Backends allows a malicious device connected to the same local network as the victim to execute arbitrary code. The vulnerability is related to the epsonds...

PT-2020-6939 · Unknown +4 · Sane-Backends +4

Name of the Vulnerable Software and Affected Versions: SANE Backends versions prior to 1.0.30 Description: The issue is related to a NULL pointer dereference error in the SANE Backends implementation. This can be exploited by a malicious device connected to the same local network as the victim,...

cups: Local privilege escalation to root due to insecure environment variable handling

It was discovered that CUPS allows non-root users to pass environment variables to CUPS backends. Affected backends use attacker-controlled environment variables without proper sanitization. A local attacker, who is part of one of the groups specified in the SystemGroups directive, could use the...

CVE-2019-7319

An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjangoBackend, RemoteUserDjangoBackend, SAML2Backend, OpenIDBackend, or OAuthBackend, external users are created with superuser privileges...

CVE-2019-7319

An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjangoBackend, RemoteUserDjangoBackend, SAML2Backend, OpenIDBackend, or OAuthBackend, external users are created with superuser privileges...

Linux: No grant table and foreign mapping limits

ISSUE DESCRIPTION Virtual device backends and device models running in domain 0, or other backend driver domains, need to be able to map guest memory either via grant mappings, or via the foreign mapping interface. Inside Xen, mapped grants are tracked by the maptrack structure. The size of this...

Fedora Update for rubygem-activejob FEDORA-2019-1cfe24db5c

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for rubygem-activejob FEDORA-2019-d0af506401

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Denial Of Service (DoS) Session Store Consumption

Django is vulnerable to denial of service through session store consumption. This vulnerable is caused by sessions backends creating new empty records in the session storage when request.session is accessed when a session key provided didn't match a current session record. This allows malicious...

DEBIAN-CVE-2018-1002105

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary reques...

Sandbox Bypass

libcups.so is vulnerable to sandbox bypasses. The library does not properly handle error conditions, allowing a malicious user with sandbox root access to execute backends without a sandbox profile...

CVE-2018-4180

It was discovered that CUPS allows non-root users to pass environment variables to CUPS backends. Affected backends use attacker-controlled environment variables without proper sanitization. A local attacker, who is part of one of the groups specified in the SystemGroups directive, could use the...

[SECURITY] Fedora 26 Update: cups-filters-1.13.4-5.fc26

Contains backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrintin...

Debian: Security Advisory (DLA-940-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...