SANE Backends Buffer Overflow Vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A buffer overflow vulnerability exists in the 'esci2img' function in versions of SANE Backends prior to 1.0.30. An attacker could exploit...

SANE Backends Code Issue Vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A code issue vulnerability exists in the 'saneiepsonnetread' function in SANE Backends 1.0.29 and prior versions. An attacker could explo...

SANE Backends epsonds component input validation error vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. An input validation error vulnerability exists in the 'epsondsnetread' function in SANE Backends versions prior to 1.0.30. An attacker...

Slackware 14.0 / 14.1 / 14.2 / current : sane (SSA:2020-139-01)

New sane packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-139-01. The text itself is copyright C Slackware Linux,...

[slackware-security] sane

New sane packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/sane-1.0.30-i586-1slack14.2.txz: Upgraded. This update fixes several security issues. For more information, see:...

Sane -- Multiple Vulnerabilities

The Sane Project reports: epson2: fixes CVE-2020-12867 GHSL-2020-075 and several memory management issues found while addressing that CVE epsonds: addresses out-of-bound memory access issues to fix CVE-2020-12862 GHSL-2020-082 and CVE-2020-12863 GHSL-2020-083, addresses a buffer overflow fixing...

PT-2020-2804 · Sane +6 · Sane-Backends +6

Name of the Vulnerable Software and Affected Versions: SANE Backends versions prior to 1.0.30 Description: A heap buffer overflow in SANE Backends may allow a malicious device connected to the same local network as the victim to execute arbitrary code. The issue is related to the epsonds componen...

PT-2020-6939 · Unknown +4 · Sane-Backends +4

Name of the Vulnerable Software and Affected Versions: SANE Backends versions prior to 1.0.30 Description: The issue is related to a NULL pointer dereference error in the SANE Backends implementation. This can be exploited by a malicious device connected to the same local network as the victim,...

PT-2020-6486 · Unknown +6 · Sane-Backends +6

Name of the Vulnerable Software and Affected Versions: SANE Backends versions prior to 1.0.30 Description: A heap buffer overflow in the SANE Backends allows a malicious device connected to the same local network as the victim to execute arbitrary code. The vulnerability is related to the epsonds...

Debian: Security Advisory (DLA-940-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the sane-backends package, related to insufficient protection of operational data, allows a perpetrator to breach data confidentiality.

The vulnerability of the sane-backends package is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise data confidentiality using the specially crafted SANENETCONTROLOPTION package...

[SECURITY] Fedora 25 Update: kxstitch-1.2.0-9.fc25

KXStitch can be used to create cross stitch patterns from scratch. It is al so possible to convert existing images to a cross stitch pattern or scan one w ith a Sane supported scanner...

[SECURITY] Fedora 26 Update: kxstitch-1.2.0-9.fc26

KXStitch can be used to create cross stitch patterns from scratch. It is al so possible to convert existing images to a cross stitch pattern or scan one w ith a Sane supported scanner...

Updated sane packages fix security vulnerability

saned could have leaked uninitialized memory back to its requesters for some opcodes, allowing for information disclosure of saned memory CVE-2017-6318...

MGASA-2017-0208 Updated sane packages fix security vulnerability

saned could have leaked uninitialized memory back to its requesters for some opcodes, allowing for information disclosure of saned memory CVE-2017-6318...

Fedora 26 : sane-backends (2017-1be1218e7f)

CVE-2017-6318 sane-backends: SANENETCONTROLOPTION response packet may contain memory contents of the server fedora-all Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

Fedora 24 : sane-backends (2017-0f5fe1913f)

CVE-2017-6318 sane-backends: SANENETCONTROLOPTION response packet may contain memory contents of the server fedora-all ---- This update adds the 'skip-adf' option to the avision driver. This let users work around problems on HP ScanJet 82xx/83xx scanners with no automatic document feeder attached...

Fedora Update for sane-backends FEDORA-2017-0f5fe1913f

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 24 Update: sane-backends-1.0.25-7.fc24

Scanner Access Now Easy SANE is a universal scanner interface. The SANE application programming interface API provides standardized access to any raster image scanner hardware flatbed scanner, hand-held scanner, video and still cameras, frame-grabbers, etc...

[SECURITY] [DLA 940-1] sane-backends security update

Package : sane-backends Version : 1.0.22-7.4+deb7u1 CVE ID : CVE-2017-6318 Debian Bug : 854804 It was discovered that there was an issue in sane-backends, an API library for scanners. It allowed remote attackers to obtain sensitive memory information via a crafted SANENETCONTROLOPTION packet. For...