CVE-2003-0775 saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of se...
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service (memory consumption or crash).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sane | = 1.0.0 | No fix listed |
| sane | = 1.0.1 | No fix listed |
| sane | = 1.0.2 | No fix listed |
| sane | = 1.0.3 | No fix listed |
| sane | = 1.0.4 | No fix listed |
| sane | = 1.0.5 | No fix listed |
| sane | = 1.0.6 | No fix listed |
| sane | = 1.0.7 | No fix listed |
| sane | = 1.0.7_beta1 | No fix listed |
| sane | = 1.0.7_beta2 | No fix listed |
| sane | = 1.0.8 | No fix listed |
| sane | = 1.0.9 | No fix listed |
| sane-backend | = 1.0.10 | No fix listed |
| debian/sane-backends(Debian:12) | < 1.0.11-1 | 1.0.11-1 |
| debian/sane-backends(Debian:13) | < 1.0.11-1 | 1.0.11-1 |
| debian/sane-backends(Debian:14) | < 1.0.11-1 | 1.0.11-1 |
References
- DSA-379 exploit patch vendor-advisory
- MDKSA-2003:099 vendor-advisory
- SuSE-SA:2003:046 vendor-advisory
- RHSA-2003:278 patch vendor-advisory
- RHSA-2003:285 vendor-advisory
- 8593 vdb-entry
- 8600 patch vdb-entry vendor-advisory
- Debian Security Tracker CVE-2003-0775 vendor-advisory