Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wxh9-34f7-vmrc

Опубликовано: 27 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file.

An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file.

EPSS

Процентиль: 11%
0.00037
Низкий

7.3 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.3
ubuntu
почти 2 года назад

An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file.

CVSS3: 7.3
nvd
почти 2 года назад

An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file.

CVSS3: 7.3
debian
почти 2 года назад

An issue in Sane 1.2.1 allows a local attacker to execute arbitrary co ...

EPSS

Процентиль: 11%
0.00037
Низкий

7.3 High

CVSS3

Дефекты

CWE-20