CVE-2023-46047

Publication date 27 March 2024

Last updated 24 July 2024


Ubuntu priority

Negligible

Why this priority?

** DISPUTED ** An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file.

Why is this CVE negligible priority?

disputed, no scenario where an attacker controls the configuration file

Learn more about Ubuntu priority

Status

Package Ubuntu Release Status
sane-backends 24.04 LTS noble
Not affected
23.10 mantic Ignored end of life, was needs-triage
22.04 LTS jammy
Not affected
20.04 LTS focal
Not affected
18.04 LTS bionic
Not affected
16.04 LTS xenial
Not affected

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
sane-backends