The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4470-1 advisory.

    Kritphong Mongkhonvanit discovered that sane-backends incorrectly handled certain packets. A remote     attacker could possibly use this issue to obtain sensitive memory information. This issue only affected     Ubuntu 16.04 LTS. (CVE-2017-6318)

    It was discovered that sane-backends incorrectly handled certain memory operations. A remote attacker     could possibly use this issue to execute arbitrary code. This issue only applied to Ubuntu 18.04 LTS and     Ubuntu 20.04 LTS. (CVE-2020-12861)

    It was discovered that sane-backends incorrectly handled certain memory operations. A remote attacker     could possibly use this issue to obtain sensitive information. (CVE-2020-12862, CVE-2020-12863)

    It was discovered that sane-backends incorrectly handled certain memory operations. A remote attacker     could possibly use this issue to obtain sensitive information. This issue only applied to Ubuntu 18.04 LTS     and Ubuntu 20.04 LTS. (CVE-2020-12864)

    It was discovered that sane-backends incorrectly handled certain memory operations. A remote attacker     could possibly use this issue to execute arbitrary code. (CVE-2020-12865)

    It was discovered that sane-backends incorrectly handled certain memory operations. A remote attacker     could possibly use this issue to cause a denial of service. This issue only applied to Ubuntu 18.04 LTS     and Ubuntu 20.04 LTS. (CVE-2020-12866)

    It was discovered that sane-backends incorrectly handled certain memory operations. A remote attacker     could possibly use this issue to cause a denial of service. (CVE-2020-12867)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for sane-backends fixes the following issues :

sane-backends was updated to 1.0.31 to further improve hardware enablement for scanner devices (jsc#ECO-2418 jsc#SLE-15561 jsc#SLE-15560) and also fix various security issues :

  - CVE-2020-12861,CVE-2020-12865: Fixed an out of bounds     write (bsc#1172524)

  - CVE-2020-12862,CVE-2020-12863,CVE-2020-12864,: Fixed an     out of bounds read (bsc#1172524)

  - CVE-2020-12866,CVE-2020-12867: Fixed a NULL pointer     dereference (bsc#1172524)

The upstream changelogs can be found here :

- https://gitlab.com/sane-project/backends/-/releases/1.0.28

- https://gitlab.com/sane-project/backends/-/releases/1.0.29

- https://gitlab.com/sane-project/backends/-/releases/1.0.30

- https://gitlab.com/sane-project/backends/-/releases/1.0.31

This update was imported from the SUSE:SLE-15:Update update project.

This update for sane-backends fixes the following issues :

sane-backends version upgrade to 1.0.31 :

  - sane-backends version upgrade to 1.0.30 fixes memory     corruption bugs CVE-2020-12861, CVE-2020-12862,     CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,     CVE-2020-12866, CVE-2020-12867 (bsc#1172524)

  - sane-backends version upgrade to 1.0.31 to further     improve hardware enablement for scanner devices     (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)

  - The new escl backend cannot be provided for SLE12     because it requires more additional software     (avahi-client, libcurl, and libpoppler-glib-devel) where     in particular for libcurl the one that is in SLE12 (via     libcurl-devel-7.37.0) is likely too old because with     that building the escl backend fails with     'escl/escl.c:1267:34: error: 'CURLOPT_UNIX_SOCKET_PATH'     undeclared curl_easy_setopt(handle,     CURLOPT_UNIX_SOCKET_PATH'

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2021: 1744 公告中提及的多个漏洞影响。

  - sane-backends：sanei_epson_net_read 函数中存在空指针取消引用漏洞 (CVE-2020-12867)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

远程 Oracle Linux 8 主机上安装的程序包受到 ELSA-2021-1744 公告中提及的漏洞的影响。

  - 在 1.0.30 之前的 SANE 后端中，sanei_epson_net_read 中的空指针取消引用可导致与受害者连接到相同本地网络的恶意设备造成拒绝服务，也称为 GHSL-2020-075。
    (CVE-2020-12867)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

远程 Rocky Linux 8 主机上存在安装的程序包该程序包受到公告 RLSA-2021:1744 中提及的漏洞的影响。

  - 在 1.0.30 之前的 SANE 后端中，sanei_epson_net_read 中的空指针取消引用可导致与受害者连接到相同本地网络的恶意设备造成拒绝服务，也称为 GHSL-2020-075。
    (CVE-2020-12867)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

Kritphong Mongkhonvanit 发现 sane-backends 未能正确处理某些数据包。远程攻击者可能利用此问题来获取敏感内存信息。此问题仅影响 Ubuntu 16.04 LTS。(CVE-2017-6318) 发现 sane-backends 未正确处理某些内存操作。远程攻击者可能利用此问题执行任意代码。此问题仅适用于 Ubuntu 18.04 LTS 和 Ubuntu 20.04 LTS。(CVE-2020-12861) 发现 sane-backends 未正确处理某些内存操作。远程攻击者可能利用此问题获取敏感信息。（CVE-2020-12862、CVE-2020-12863）发现 sane-backends 未正确处理某些内存操作。远程攻击者可能利用此问题来获取敏感信息。此问题仅适用于 Ubuntu 18.04 LTS 和 Ubuntu 20.04 LTS。(CVE-2020-12864) 发现 sane-backends 未正确处理某些内存操作。远程攻击者可能利用此问题执行任意代码。
(CVE-2020-12865) 发现 sane-backends 未正确处理某些内存操作。远程攻击者可能利用此问题造成拒绝服务。此问题仅适用于 Ubuntu 18.04 LTS 和 Ubuntu 20.04 LTS。(CVE-2020-12866) 发现 sane-backends 未正确处理某些内存操作。远程攻击者可能利用此问题造成拒绝服务。(CVE-2020-12867)。

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动清理和排版。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
139783	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : sane-backends vulnerabilities (USN-4470-1)	Nessus	Ubuntu Local Security Checks	2020/8/25	2025/9/3	high
142181	openSUSE Security Update : sane-backends (openSUSE-2020-1798)	Nessus	SuSE Local Security Checks	2020/11/2	2024/2/13	high
143832	SUSE SLES12 Security Update : sane-backends (SUSE-SU-2020:3125-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	high
149671	RHEL 8：sane-backends (RHSA-2021: 1744)	Nessus	Red Hat Local Security Checks	2021/5/19	2024/11/7	medium
149939	Oracle Linux 8：sane-backends (ELSA-2021-1744)	Nessus	Oracle Linux Local Security Checks	2021/5/26	2024/11/1	medium
184568	Rocky Linux 8sane-backends (RLSA-2021:1744)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	medium
139783	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS：sane-backends 漏洞 (USN-4470-1)	Nessus	Ubuntu Local Security Checks	2020/8/25	2025/9/3	high

检测

插件搜索

high

high

high

medium

medium

medium

high