Red Hat Security AdvisoryRHSA-2020:2967
sane-backends security update
Released 2020-07-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 8.1) sane-backends-1.0.27-19.el8_1.1, sane-backends-daemon-1.0.27-19.el8_1.1, sane-backends-devel-1.0.27-19.el8_1.1 +4
Fixes 2 records
Priority MEDIUM 44
A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-080.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.03044 · Published 2020-06-24 · Fixed CWE-787
Priority LOW 38
A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.01457 · Published 2020-06-24 · Fixed CWE-787
