CVE-2003-0777 saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of serv...
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service (segmentation fault).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sane | = 1.0.0 | No fix listed |
| sane | = 1.0.1 | No fix listed |
| sane | = 1.0.2 | No fix listed |
| sane | = 1.0.3 | No fix listed |
| sane | = 1.0.4 | No fix listed |
| sane | = 1.0.5 | No fix listed |
| sane | = 1.0.6 | No fix listed |
| sane | = 1.0.7 | No fix listed |
| sane | = 1.0.7_beta1 | No fix listed |
| sane | = 1.0.7_beta2 | No fix listed |
| sane | = 1.0.8 | No fix listed |
| sane | = 1.0.9 | No fix listed |
| sane-backend | = 1.0.10 | No fix listed |
| debian/sane-backends(Debian:12) | < 1.0.11-1 | 1.0.11-1 |
| debian/sane-backends(Debian:13) | < 1.0.11-1 | 1.0.11-1 |
| debian/sane-backends(Debian:14) | < 1.0.11-1 | 1.0.11-1 |
References
- DSA-379 exploit patch vendor-advisory
- MDKSA-2003:099 vendor-advisory
- SuSE-SA:2003:046 vendor-advisory
- RHSA-2003:278 patch vendor-advisory
- RHSA-2003:285 vendor-advisory
- 8593 vdb-entry
- 8597 vdb-entry
- Debian Security Tracker CVE-2003-0777 vendor-advisory