Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-46047
HistoryMar 27, 2024 - 12:00 a.m.

CVE-2023-46047

2024-03-2700:00:00
ubuntu.com
ubuntu.com
5
sane 1.2.1
cve-2023-46047
local attacker
arbitrary code execution
crafted file
sanei_configure_attach function

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

9.0%

DISPUTED An issue in Sane 1.2.1 allows a local attacker to execute
arbitrary code via a crafted file to the sanei_configure_attach() function.
NOTE: this is disputed because there is no expectation that the product
should be starting with an attacker-controlled configuration file.

Bugs

Notes

Author Note
Priority reason: disputed, no scenario where an attacker controls the configuration file

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

9.0%

Related for UB:CVE-2023-46047