CVE-2020-12864 — Out-of-bounds Read in Sane Backends
Severity
4.3MEDIUMNVD
OSV7.5
EPSS
0.2%
top 52.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 24
Latest updateMay 24
Description
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-081.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4
Affected Packages3 packages
Also affects: Ubuntu Linux 16.04, 18.04, 20.04
🔴Vulnerability Details
4📋Vendor Advisories
3💬Community
3Bugzilla▶
CVE-2020-12864 mingw-sane-backends: sane-backends: Reading uninitialized data in epsonds_net_read in epsonds-net.c [fedora-all]↗2020-06-24
Bugzilla▶
CVE-2020-12864 sane-backends: Reading uninitialized data in epsonds_net_read in epsonds-net.c↗2020-06-24
Bugzilla▶
CVE-2020-12864 sane-backends: Reading uninitialized data in epsonds_net_read in epsonds-net.c [fedora-all]↗2020-06-24