OESA-2021-1033

    Dashboard / Vulnerabilities / OESA-2021-1033

    OESA-2021-1033

    Published: 5 Feb 2021Last Modified: 18 Aug 2026
    Upstream:
    CVE-2020-12867

    Summary: sane-backends security update

    Details: SANE (Scanner Access Now Easy) is a sane and simple interface to both local and networked scanners and other image acquisition devices like digital still and video cameras.\r\n\r\n Security Fix(es):\r\n\r\n A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075.(CVE-2020-12867)\r\n\r\n

    References: https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1033, https://nvd.nist.gov/vuln/detail/CVE-2020-12867

    Affected packages

    Package

    Name: sane-backends

    Purl: pkg:rpm/openEuler/sane-backends&distro=openEuler-20.03-LTS

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1.0.28-9.oe1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OESA-2021-1033 | CVE-DB