PT-2016-3236 · Sane+4 · Sane-Backends+4
Kritphong Mongkhonvanit
·
Publicado
2016-12-16
·
Atualizado
2020-11-03
·
CVE-2017-6318
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
sane-backends version 1.0.25
Description
The issue is related to insufficient protection of internal data in the sane-backends package. It can be exploited by a remote attacker using a specially crafted SANE NET CONTROL OPTION packet to compromise data confidentiality. This may allow the attacker to obtain sensitive memory information.
Recommendations
For version 1.0.25, consider restricting access to the
SANE NET CONTROL OPTION packet to minimize the risk of exploitation until a patch is available.Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linuxmint
Suse
Ubuntu
Sane-Backends