Read the docs
TI-2003-00719 Aliases CVE-2003-0776GHSA-pf42-5v8g-g3xx

saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC…

Priority LOW 36Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.

Why it matters now

EPSS 0.01809 78th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:a:sane:sane:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableSane
cpe:2.3:a:sane:sane:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableSane
cpe:2.3:a:sane:sane:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableSane
cpe:2.3:a:sane:sane:1.0.3:*:*:*:*:*:*:*1.0.3VulnerableSane
cpe:2.3:a:sane:sane:1.0.4:*:*:*:*:*:*:*1.0.4VulnerableSane
cpe:2.3:a:sane:sane:1.0.5:*:*:*:*:*:*:*1.0.5VulnerableSane
cpe:2.3:a:sane:sane:1.0.6:*:*:*:*:*:*:*1.0.6VulnerableSane
cpe:2.3:a:sane:sane:1.0.7:*:*:*:*:*:*:*1.0.7VulnerableSane
cpe:2.3:a:sane:sane:1.0.7_beta1:*:*:*:*:*:*:*1.0.7_beta1VulnerableSane
cpe:2.3:a:sane:sane:1.0.7_beta2:*:*:*:*:*:*:*1.0.7_beta2VulnerableSane
  • cpe:2.3:a:sane:sane:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.4:*:*:*:*:*:*:* Versions 1.0.4 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.7_beta1:*:*:*:*:*:*:* Versions 1.0.7_beta1 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.7_beta2:*:*:*:*:*:*:* Versions 1.0.7_beta2 Vulnerable ·Sane
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:sane:sane:1.0.8:*:*:*:*:*:*:*1.0.8VulnerableSane
cpe:2.3:a:sane:sane:1.0.9:*:*:*:*:*:*:*1.0.9VulnerableSane
cpe:2.3:a:sane:sane-backend:1.0.10:*:*:*:*:*:*:*1.0.10VulnerableSane
  • cpe:2.3:a:sane:sane:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane:1.0.9:*:*:*:*:*:*:* Versions 1.0.9 Vulnerable ·Sane
  • cpe:2.3:a:sane:sane-backend:1.0.10:*:*:*:*:*:*:* Versions 1.0.10 Vulnerable ·Sane

Remediation

Red Hat 2 advisories

  • RHSA-2003:278 Released 2003-10-07 · Red Hat rating Moderate
    : Updated SANE packages fix remote vulnerabilities
    • Red Hat Linux 7.1
    • Red Hat Linux 7.2
    • Red Hat Linux 7.3
    • Red Hat Linux 8.0
  • RHSA-2003:285 Released 2003-10-07 · Red Hat rating Moderate
    sane-backends security update
    • Red Hat Enterprise Linux AS (Advanced Server) version 2.1
    • Red Hat Enterprise Linux ES version 2.1
    • Red Hat Enterprise Linux WS version 2.1
    • Red Hat Linux Advanced Workstation 2.1

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 Fixed RHSA-2003:285
Red Hat Enterprise Linux ES version 2.1Fixed RHSA-2003:285
Red Hat Enterprise Linux WS version 2.1Fixed RHSA-2003:285
Red Hat Linux 7.1Fixed RHSA-2003:278
Red Hat Linux 7.2Fixed RHSA-2003:278
Red Hat Linux 7.3Fixed RHSA-2003:278
Red Hat Linux 8.0Fixed RHSA-2003:278
Red Hat Linux Advanced Workstation 2.1Fixed RHSA-2003:285

Timeline

  1. 2026-10-02 Threatist record created from CVE-2003-0776
  2. 2026-10-03 Alias added: GHSA-pf42-5v8g-g3xx

References

Exploit 1

Patch 1

Advisory 3

  • TI-2003-00717 saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which… CVSS 2.0HIGH 7.5
  • TI-2003-00716 saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting… CVSS 2.0HIGH 7.5
  • TI-2003-00718 saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a… CVSS 2.0MEDIUM 5.0
  • TI-2003-00721 saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly… CVSS 2.0MEDIUM 5.0
  • TI-2003-00720 saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not… CVSS 2.0MEDIUM 5.0
  • TI-2001-00847 Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend… CVSS 2.0LOW 2.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences