SB
Product
Sane Backends
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 5Low 0
Watch
Add Sane Backends to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-12861 | 8.8 | Jun 24 | A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-080 Affected: before 1.0.30 |
| CVE-2020-12865 | 8.0 | Jun 24 | A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084 Affected: before 1.0.30 |
| CVE-2023-46047 | 7.3 | Mar 27 | An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function Affected: 1.2.1 |
| CVE-2023-46052 | 7.1 | Mar 27 | Sane 1.2.1 heap bounds overwrite in init_options() from backend/test.c via a long init_mode string in a configuration file Affected: 1.2.1 |
| CVE-2020-12866 | 5.7 | Jun 24 | A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079 Affected: before 1.0.30 |
| CVE-2020-12867 | 5.5 | Jun 1 | A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of… Affected: before 1.0.30 |
| CVE-2020-12864 | 4.3 | Jun 24 | An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR… Affected: before 1.0.30 |
| CVE-2020-12863 | 4.3 | Jun 24 | An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR… Affected: before 1.0.30 |
| CVE-2020-12862 | 4.3 | Jun 24 | An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR… Affected: before 1.0.30 |
Showing 9