saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service (segmentation fault).

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.00833
Percentile: 0.73635

CVSS Scoring

Affected Products

• cpe:2.3:a:sane:sane:1.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:sane:sane:1.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:sane:sane:1.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:sane:sane:1.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:sane:sane:1.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:sane:sane:1.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:sane:sane:1.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:sane:sane:1.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:sane:sane:1.0.7_beta1:*:*:*:*:*:*:*
• cpe:2.3:a:sane:sane:1.0.7_beta2:*:*:*:*:*:*:*
• cpe:2.3:a:sane:sane:1.0.8:*:*:*:*:*:*:*
• cpe:2.3:a:sane:sane:1.0.9:*:*:*:*:*:*:*
• cpe:2.3:a:sane:sane-backend:1.0.10:*:*:*:*:*:*:*

← Back to Home