Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2020-12866

Published: 24 June 2020

A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079.

Priority

Medium

CVSS 3 base score: 5.7

Status

Package Release Status
sane-backends
Launchpad, Ubuntu, Debian
bionic
Released (1.0.27-1~experimental3ubuntu2.3)
eoan Ignored
(reached end-of-life)
focal
Released (1.0.29-0ubuntu5.1)
precise Does not exist

trusty Does not exist

upstream
Released (1.0.30)
xenial Not vulnerable
(code not present)
Patches:
upstream: https://gitlab.com/sane-project/backends/-/commit/30b1831a28f24ab2921b9f717c66d37f02bb81cc