Unknown
Product
debian/sane-backends vulnerabilities
19 published CVES affecting debian/sane-backends, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 19
- Critical
- 0
- High
- 6
- Medium
- 8
- Low
- 0
- Unscored
- 5
- CISA KEV
- 0
Latest debian/sane-backends CVEs
Newest publication first
-
-
Unknown
-
MediumCVSS 4.3 EPSS 1.1%
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-082.
-
MediumCVSS 4.3 EPSS 1.0%
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-083.
-
MediumCVSS 4.3 EPSS 1.2%
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-081.
-
HighCVSS 8.0 EPSS 1.5%
A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084.
-
MediumCVSS 5.7 EPSS 1.0%
A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079.
-
HighCVSS 8.8 EPSS 3.0%
A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-080.
-
MediumCVSS 5.5 EPSS 0.50%
A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075.
-
Unknown
-
Unknown
-
HighCVSS 7.5 EPSS 3.0%
saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CONTROL_OPTION packet.
-
MediumCVSS 5.0 EPSS 1.8%
saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption).
-
MediumCVSS 5.0 EPSS 1.8%
saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service (segmentation fault).
-
HighCVSS 7.5 EPSS 1.8%
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.
-
MediumCVSS 5.0 EPSS 2.1%
saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service (memory consumption or crash).
-
HighCVSS 7.5 EPSS 2.1%
saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service (segmentation fault) when invalid memory is accessed.
-
HighCVSS 7.5 EPSS 1.9%
saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.
-
Unknown
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.