Sane Backend up to 1.0.29 out-of-bounds write

Summaryinfo

A vulnerability was found in Sane Backend up to 1.0.29. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation results in out-of-bounds write. This vulnerability is reported as CVE-2020-12865. The attacker must have access to the local network to execute the attack. No exploit exists. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in Sane Backend up to 1.0.29. Affected is some unknown processing. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. CWE is classifying the issue as CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084.

The weakness was disclosed 06/24/2020 (Website). The advisory is shared for download at alioth-lists.debian.net. This vulnerability is traded as CVE-2020-12865 since 05/14/2020. Access to the local network is required for this attack to succeed. Required for exploitation is a authentication. There are neither technical details nor an exploit publicly available.

Upgrading to version 1.0.30 eliminates this vulnerability.

The entries VDB-155910, VDB-157208, VDB-157209 and VDB-157210 are pretty similar. Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Sane

Name

• Backend

Version

• 1.0.0
• 1.0.1
• 1.0.2
• 1.0.3
• 1.0.4
• 1.0.5
• 1.0.6
• 1.0.7
• 1.0.8
• 1.0.9
• 1.0.10
• 1.0.11
• 1.0.12
• 1.0.13
• 1.0.14
• 1.0.15
• 1.0.16
• 1.0.17
• 1.0.18
• 1.0.19
• 1.0.20
• 1.0.21
• 1.0.22
• 1.0.23
• 1.0.24
• 1.0.25
• 1.0.26
• 1.0.27
• 1.0.28
• 1.0.29

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion