CVE-2020-12867

Published: 01 June 2020

A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075.

Priority

Medium

CVSS 3 base score: 5.5

Status

Package Release Status
sane-backends
Launchpad, Ubuntu, Debian
Upstream
Released (1.0.30)
Ubuntu 20.04 LTS (Focal Fossa)
Released (1.0.29-0ubuntu5.1)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (1.0.27-1~experimental3ubuntu2.3)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (1.0.25+git20150528-1ubuntu2.16.04.3)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

Patches:
Upstream: https://gitlab.com/sane-project/backends/-/commit/fff83e7eacd0f27bb2d71c42488e0fd735c15ac3