Описание
Security update for sane-backends
This update for sane-backends fixes the following issues:
sane-backends was updated to 1.0.31 to further improve hardware enablement for scanner devices (jsc#ECO-2418 jsc#SLE-15561 jsc#SLE-15560) and also fix various security issues:
- CVE-2020-12861,CVE-2020-12865: Fixed an out of bounds write (bsc#1172524)
- CVE-2020-12862,CVE-2020-12863,CVE-2020-12864,: Fixed an out of bounds read (bsc#1172524)
- CVE-2020-12866,CVE-2020-12867: Fixed a null pointer dereference (bsc#1172524)
The upstream changelogs can be found here:
Список пакетов
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
SUSE Linux Enterprise Module for Desktop Applications 15 SP2
SUSE Linux Enterprise Module for Package Hub 15 SP1
SUSE Linux Enterprise Module for Package Hub 15 SP2
Ссылки
- Link for SUSE-SU-2020:3065-1
- E-Mail link for SUSE-SU-2020:3065-1
- SUSE Security Ratings
- SUSE Bug 1172524
- SUSE CVE CVE-2020-12861 page
- SUSE CVE CVE-2020-12862 page
- SUSE CVE CVE-2020-12863 page
- SUSE CVE CVE-2020-12864 page
- SUSE CVE CVE-2020-12865 page
- SUSE CVE CVE-2020-12866 page
- SUSE CVE CVE-2020-12867 page
Описание
A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-080.
Затронутые продукты
Ссылки
- CVE-2020-12861
- SUSE Bug 1172524
Описание
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-082.
Затронутые продукты
Ссылки
- CVE-2020-12862
- SUSE Bug 1172524
Описание
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-083.
Затронутые продукты
Ссылки
- CVE-2020-12863
- SUSE Bug 1172524
Описание
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-081.
Затронутые продукты
Ссылки
- CVE-2020-12864
- SUSE Bug 1172524
Описание
A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084.
Затронутые продукты
Ссылки
- CVE-2020-12865
- SUSE Bug 1172524
Описание
A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079.
Затронутые продукты
Ссылки
- CVE-2020-12866
- SUSE Bug 1172524
Описание
A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075.
Затронутые продукты
Ссылки
- CVE-2020-12867
- SUSE Bug 1172524