CVE-2003-0778 saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption)...
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sane | = 1.0.0 | No fix listed |
| sane | = 1.0.1 | No fix listed |
| sane | = 1.0.2 | No fix listed |
| sane | = 1.0.3 | No fix listed |
| sane | = 1.0.4 | No fix listed |
| sane | = 1.0.5 | No fix listed |
| sane | = 1.0.6 | No fix listed |
| sane | = 1.0.7 | No fix listed |
| sane | = 1.0.7_beta1 | No fix listed |
| sane | = 1.0.7_beta2 | No fix listed |
| sane | = 1.0.8 | No fix listed |
| sane | = 1.0.9 | No fix listed |
| sane-backend | = 1.0.10 | No fix listed |
| debian/sane-backends(Debian:12) | < 1.0.11-1 | 1.0.11-1 |
| debian/sane-backends(Debian:13) | < 1.0.11-1 | 1.0.11-1 |
| debian/sane-backends(Debian:14) | < 1.0.11-1 | 1.0.11-1 |
References
- DSA-379 exploit patch vendor-advisory
- MDKSA-2003:099 vendor-advisory
- SuSE-SA:2003:046 vendor-advisory
- RHSA-2003:278 patch vendor-advisory
- RHSA-2003:285 vendor-advisory
- 8593 vdb-entry
- 8596 vdb-entry
- Debian Security Tracker CVE-2003-0778 vendor-advisory