Read the docs
TI-2003-00716 Aliases CVE-2003-0773GHSA-5h29-fm96-2q8j

saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting…

Priority LOW 37Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.

Why it matters now

EPSS 0.01939 80th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:a:sane:sane:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableSane
cpe:2.3:a:sane:sane:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableSane
cpe:2.3:a:sane:sane:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableSane
cpe:2.3:a:sane:sane:1.0.3:*:*:*:*:*:*:*1.0.3VulnerableSane
cpe:2.3:a:sane:sane:1.0.4:*:*:*:*:*:*:*1.0.4VulnerableSane
cpe:2.3:a:sane:sane:1.0.5:*:*:*:*:*:*:*1.0.5VulnerableSane
cpe:2.3:a:sane:sane:1.0.6:*:*:*:*:*:*:*1.0.6VulnerableSane
cpe:2.3:a:sane:sane:1.0.7:*:*:*:*:*:*:*1.0.7VulnerableSane
cpe:2.3:a:sane:sane:1.0.7_beta1:*:*:*:*:*:*:*1.0.7_beta1VulnerableSane
cpe:2.3:a:sane:sane:1.0.7_beta2:*:*:*:*:*:*:*1.0.7_beta2VulnerableSane
  • cpe:2.3:a:sane:sane:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.4:*:*:*:*:*:*:* Versions 1.0.4 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.7_beta1:*:*:*:*:*:*:* Versions 1.0.7_beta1 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.7_beta2:*:*:*:*:*:*:* Versions 1.0.7_beta2 Vulnerable ·Sane
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:sane:sane:1.0.8:*:*:*:*:*:*:*1.0.8VulnerableSane
cpe:2.3:a:sane:sane:1.0.9:*:*:*:*:*:*:*1.0.9VulnerableSane
cpe:2.3:a:sane:sane-backend:1.0.10:*:*:*:*:*:*:*1.0.10VulnerableSane
  • cpe:2.3:a:sane:sane:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.9:*:*:*:*:*:*:* Versions 1.0.9 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane-backend:1.0.10:*:*:*:*:*:*:* Versions 1.0.10 Vulnerable ·Sane

Remediation

Red Hat 2 advisories

  • RHSA-2003:278 Released 2003-10-07 · Red Hat rating Moderate
    : Updated SANE packages fix remote vulnerabilities
    • Red Hat Linux 7.1
    • Red Hat Linux 7.2
    • Red Hat Linux 7.3
    • Red Hat Linux 8.0
  • RHSA-2003:285 Released 2003-10-07 · Red Hat rating Moderate
    sane-backends security update
    • Red Hat Enterprise Linux AS (Advanced Server) version 2.1
    • Red Hat Enterprise Linux ES version 2.1
    • Red Hat Enterprise Linux WS version 2.1
    • Red Hat Linux Advanced Workstation 2.1

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 Fixed RHSA-2003:285
Red Hat Enterprise Linux ES version 2.1Fixed RHSA-2003:285
Red Hat Enterprise Linux WS version 2.1Fixed RHSA-2003:285
Red Hat Linux 7.1Fixed RHSA-2003:278
Red Hat Linux 7.2Fixed RHSA-2003:278
Red Hat Linux 7.3Fixed RHSA-2003:278
Red Hat Linux 8.0Fixed RHSA-2003:278
Red Hat Linux Advanced Workstation 2.1Fixed RHSA-2003:285

Timeline

  1. 2026-10-02 Threatist record created from CVE-2003-0773
  2. 2026-10-03 Alias added: GHSA-5h29-fm96-2q8j

References

Patch 1

Advisory 4

  • TI-2003-00717 saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which… CVSS 2.0HIGH 7.5
  • TI-2003-00719 saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC… CVSS 2.0HIGH 7.5
  • TI-2003-00718 saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a… CVSS 2.0MEDIUM 5.0
  • TI-2003-00721 saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly… CVSS 2.0MEDIUM 5.0
  • TI-2003-00720 saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not… CVSS 2.0MEDIUM 5.0
  • TI-2001-00847 Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend… CVSS 2.0LOW 2.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences