Malware Devil

Tuesday, August 18, 2020

ESB-2020.2830 – [Debian] sane-backends: Multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2020.2830
                       sane-backends security update
                              18 August 2020

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           sane-backends
Publisher:         Debian
Operating System:  Debian GNU/Linux 9
Impact/Access:     Execute Arbitrary Code/Commands -- Remote/Unauthenticated
                   Denial of Service               -- Remote/Unauthenticated
                   Access Confidential Data        -- Remote/Unauthenticated
Resolution:        Patch/Upgrade
CVE Names:         CVE-2020-12867 CVE-2020-12865 CVE-2020-12863
                   CVE-2020-12862  

Reference:         ESB-2020.2405
                   ESB-2020.1902

Original Bulletin: 
   https://www.debian.org/lts/security/2020/dla-2332

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- - -------------------------------------------------------------------------
Debian LTS Advisory DLA-2332-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                                     
August 17, 2020                               https://wiki.debian.org/LTS
- - -------------------------------------------------------------------------

Package        : sane-backends
Version        : 1.0.25-4.1+deb9u1
CVE ID         : CVE-2020-12862 CVE-2020-12863 CVE-2020-12865 CVE-2020-12867
Debian Bug     : 961302

Kevin Backhouse discovered multiple vulnerabilies in the epson2 and
epsonds backends of SANE, a library for scanners.  A malicious remote
device could exploit these to trigger information disclosure, denial
of service and possibly remote code execution.

CVE-2020-12862

    An out-of-bounds read in SANE Backends before 1.0.30 may allow a
    malicious device connected to the same local network as the victim
    to read important information, such as the ASLR offsets of the
    program, aka GHSL-2020-082.

CVE-2020-12863

    An out-of-bounds read in SANE Backends before 1.0.30 may allow a
    malicious device connected to the same local network as the victim
    to read important information, such as the ASLR offsets of the
    program, aka GHSL-2020-083.

CVE-2020-12865

    A heap buffer overflow in SANE Backends before 1.0.30 may allow a
    malicious device connected to the same local network as the victim
    to execute arbitrary code, aka GHSL-2020-084.

CVE-2020-12867

    A NULL pointer dereference in sanei_epson_net_read in SANE
    Backends before 1.0.30 allows a malicious device connected to the
    same local network as the victim to cause a denial of service, aka
    GHSL-2020-075.

For Debian 9 stretch, these problems have been fixed in version
1.0.25-4.1+deb9u1.

We recommend that you upgrade your sane-backends packages.

For the detailed security status of sane-backends please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/sane-backends

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
- -----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEQic8GuN/xDR88HkSj/HLbo2JBZ8FAl867r8ACgkQj/HLbo2J
BZ8Sigf+NsgImpn32bxGeiCNsJXHqsS/vLgNb45kQftxUWTcMrphbvkMU/NYh+r7
ntkiE0tG5mF2hV1C77V8+PDzy+/WhBilYmOSCuM/bxpSA6fJQscqMM34vBhpfolY
CDjnwN+qKhY4miK7/EwcpMKf4M4i5wbTB17dSOKm1byV3ZAkojr2cOMgHcftJAQI
Z+R+nha/h1bwHGHQEKFqEPXZIsEe3qhQFpz0WWJQY/kyXcEztkcseJb4UJCKT0yz
zYinxl7iiNhyDJJI2iH/W5g/Z8n4evYlkWS9ikFYTRMhe8K73qqJ/iWyQZikIPPi
8QDWuC6cLTAdxvxFzLtT1IyZuQ+SwA==
=RbIL
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=HHXq
-----END PGP SIGNATURE-----

Read More



https://www.malwaredevil.com/2020/08/18/esb-2020-2830-debian-sane-backends-multiple-vulnerabilities/?utm_source=rss&utm_medium=rss&utm_campaign=esb-2020-2830-debian-sane-backends-multiple-vulnerabilities

No comments:

Post a Comment

Barbary Pirates and Russian Cybercrime

In 1801, the United States had a small Navy. Thomas Jefferson deployed almost half that Navy—three frigates and a schooner—to the Barbary C...