Lucene search

Arbitrary Code Execution

🗓️ 02 Jul 2020 06:34:59Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 16 Views

libsane.so arbitrary code execution from off-by-one flaw when parsing MpegPs file

Reporter	Title	Published	Views	Family All 48
NVD	CVE-2020-12865	24 Jun 202013:15	–	nvd
AlpineLinux	CVE-2020-12865	24 Jun 202013:15	–	alpinelinux
UbuntuCve	CVE-2020-12865	24 Jun 202000:00	–	ubuntucve
CVE	CVE-2020-12865	24 Jun 202013:15	–	cve
RedhatCVE	CVE-2020-12865	24 Jun 202014:20	–	redhatcve
Cvelist	CVE-2020-12865	24 Jun 202012:52	–	cvelist
Debian CVE	CVE-2020-12865	24 Jun 202013:15	–	debiancve
Prion	Heap overflow	24 Jun 202013:15	–	prion
Tenable Nessus	RHEL 8 : sane-backends (RHSA-2020:2967)	16 Jul 202000:00	–	nessus
Tenable Nessus	CentOS 8 : sane-backends (CESA-2020:2902)	1 Feb 202100:00	–	nessus

Vulners

Node

-sane\Match3.121.0.29-r0

-sane\Matchedge1.0.29-r0

-sane\Match3.121.0.29-r0

-sane\Matchedge1.0.29-r0

-libsane.soRange≤1.0.29

Source	Link
gitlab	www.gitlab.com/sane-project/backends/-/releases
lists	www.lists.debian.org/debian-lts-announce/2020/08/msg00029.html
lists	www.lists.debian.org/debian-lts-announce/2020/10/msg00010.html
gitlab	www.gitlab.com/sane-project/backends/-/issues/279
alioth-lists	www.alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html
securitylab	www.securitylab.github.com/advisories/GHSL-2020-075-libsane
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html
usn	www.usn.ubuntu.com/4470-1/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Jul 2020 06:59Current

5.8Medium risk

Vulners AI Score5.8

EPSS0.001