NetSight
IP …
medium4.3

CVE-2020-12863

An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important informati…

Impact

An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-083.

Affected products

VendorProductAffected versions
Sane-ProjectSane Backends
before 1.0.30
CanonicalUbuntu Linux
Versions 16.04, 18.04, 20.04
DebianDebian Linux
Version 9.0
OpensuseLeap
Versions 15.1, 15.2

Weakness classification

CWE-125

References