Published: 01/06/2020 Updated: 07/11/2023

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

A NULL pointer dereference in sanei_epson_net_read in SANE Backends prior to 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sane-project sane_backends
fedoraproject fedora 32
debian debian linux 9.0
opensuse leap 15.1
opensuse leap 15.2
canonical ubuntu linux 18.04
canonical ubuntu linux 20.04
canonical ubuntu linux 16.04

CWE-476 https://gitlab.com/sane-project/backends/-/issues/279#issue-1-ghsl-2020-075-null-pointer-dereference-in-sanei_epson_net_read https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html https://securitylab.github.com/advisories/GHSL-2020-075-libsane https://lists.debian.org/debian-lts-announce/2020/08/msg00029.html https://usn.ubuntu.com/4470-1/https://lists.debian.org/debian-lts-announce/2020/10/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWUVCHURVGGYBEUOBA4PLSNXJVBKHJYJ/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-12867

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect