-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2020.2830
sane-backends security update
18 August 2020
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: sane-backends
Publisher: Debian
Operating System: Debian GNU/Linux 9
Impact/Access: Execute Arbitrary Code/Commands -- Remote/Unauthenticated
Denial of Service -- Remote/Unauthenticated
Access Confidential Data -- Remote/Unauthenticated
Resolution: Patch/Upgrade
CVE Names: CVE-2020-12867 CVE-2020-12865 CVE-2020-12863
CVE-2020-12862
Reference: ESB-2020.2405
ESB-2020.1902
Original Bulletin:
https://www.debian.org/lts/security/2020/dla-2332
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- - -------------------------------------------------------------------------
Debian LTS Advisory DLA-2332-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/
August 17, 2020 https://wiki.debian.org/LTS
- - -------------------------------------------------------------------------
Package : sane-backends
Version : 1.0.25-4.1+deb9u1
CVE ID : CVE-2020-12862 CVE-2020-12863 CVE-2020-12865 CVE-2020-12867
Debian Bug : 961302
Kevin Backhouse discovered multiple vulnerabilies in the epson2 and
epsonds backends of SANE, a library for scanners. A malicious remote
device could exploit these to trigger information disclosure, denial
of service and possibly remote code execution.
CVE-2020-12862
An out-of-bounds read in SANE Backends before 1.0.30 may allow a
malicious device connected to the same local network as the victim
to read important information, such as the ASLR offsets of the
program, aka GHSL-2020-082.
CVE-2020-12863
An out-of-bounds read in SANE Backends before 1.0.30 may allow a
malicious device connected to the same local network as the victim
to read important information, such as the ASLR offsets of the
program, aka GHSL-2020-083.
CVE-2020-12865
A heap buffer overflow in SANE Backends before 1.0.30 may allow a
malicious device connected to the same local network as the victim
to execute arbitrary code, aka GHSL-2020-084.
CVE-2020-12867
A NULL pointer dereference in sanei_epson_net_read in SANE
Backends before 1.0.30 allows a malicious device connected to the
same local network as the victim to cause a denial of service, aka
GHSL-2020-075.
For Debian 9 stretch, these problems have been fixed in version
1.0.25-4.1+deb9u1.
We recommend that you upgrade your sane-backends packages.
For the detailed security status of sane-backends please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/sane-backends
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
- -----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEEQic8GuN/xDR88HkSj/HLbo2JBZ8FAl867r8ACgkQj/HLbo2J
BZ8Sigf+NsgImpn32bxGeiCNsJXHqsS/vLgNb45kQftxUWTcMrphbvkMU/NYh+r7
ntkiE0tG5mF2hV1C77V8+PDzy+/WhBilYmOSCuM/bxpSA6fJQscqMM34vBhpfolY
CDjnwN+qKhY4miK7/EwcpMKf4M4i5wbTB17dSOKm1byV3ZAkojr2cOMgHcftJAQI
Z+R+nha/h1bwHGHQEKFqEPXZIsEe3qhQFpz0WWJQY/kyXcEztkcseJb4UJCKT0yz
zYinxl7iiNhyDJJI2iH/W5g/Z8n4evYlkWS9ikFYTRMhe8K73qqJ/iWyQZikIPPi
8QDWuC6cLTAdxvxFzLtT1IyZuQ+SwA==
=RbIL
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=HHXq
-----END PGP SIGNATURE-----
https://www.malwaredevil.com/2020/08/18/esb-2020-2830-debian-sane-backends-multiple-vulnerabilities/?utm_source=rss&utm_medium=rss&utm_campaign=esb-2020-2830-debian-sane-backends-multiple-vulnerabilities
No comments:
Post a Comment