CVE-2020-12865
Summary
| CVE | CVE-2020-12865 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-06-24 13:15:00 UTC |
|---|
| Updated | 2022-11-08 03:26:00 UTC |
|---|
| Description | A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| GHSL-2020-075, GHSL-2020-079, GHSL-2020-080, GHSL-2020-081, GHSL-2020-082, GHSL-2020-083, GHSL-2020-084: Multiple vulnerabilities in SANE Backends (DoS, RCE) - GitHub Security Lab |
MISC |
securitylab.github.com |
Exploit, Third Party Advisory |
| [security-announce] openSUSE-SU-2020:1791-1: important: Security update |
SUSE |
lists.opensuse.org |
|
| [sane-announce] SANE Backends 1.0.30 security bug fix release |
CONFIRM |
alioth-lists.debian.net |
Mailing List, Release Notes, Third Party Advisory |
| [SECURITY] [DLA 2332-1] sane-backends security update |
MLIST |
lists.debian.org |
|
| USN-4470-1: sane-backends vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
|
| [SECURITY] [DLA 2332-2] sane-backends regression update |
MLIST |
lists.debian.org |
|
| [security-announce] openSUSE-SU-2020:1798-1: important: Security update |
SUSE |
lists.opensuse.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 501245 Alpine Linux Security Update for sane
- 671420 EulerOS Security Update for sane-backends (EulerOS-SA-2022-1362)
- 940152 AlmaLinux Security Update for sane-backends (ALSA-2020:2902)
