Approved changes feed: RSS · Atom

cpe:2.3:o:sane-project:sane_backends:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSane Project (b835a60f-dae4-591b-96df-b255793f2fad)
ProductSane Backends (32cbfd03-671a-5f36-b1c2-3a22399cba36)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/sane-backends purl2cpe 2026-06-01 10:16:14.123904
pkg:deb/ubuntu/sane-backends purl2cpe 2026-06-01 10:16:14.123906
pkg:github/marschap/sane-backends purl2cpe 2026-06-01 10:16:14.123907
pkg:github/miurahr/sane-backends purl2cpe 2026-06-01 10:16:14.123909
pkg:github/nphilipp/sane-backends purl2cpe 2026-06-01 10:16:14.123910
pkg:gitlab/redhat/sane-backends purl2cpe 2026-06-01 10:16:14.123912
pkg:gitlab/sane-project/backends purl2cpe 2026-06-01 10:16:14.123913
pkg:rpm/centos/sane-backends purl2cpe 2026-06-01 10:16:14.123914
pkg:rpm/fedora/sane-backends purl2cpe 2026-06-01 10:16:14.123916
pkg:rpm/opensuse/sane-backends purl2cpe 2026-06-01 10:16:14.123917

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-12867 vulnerable 2026-06-08 05:17:59.483759 Details available
A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075.
Published: 2020-06-01T13:50:43.000Z
Updated: 2024-08-04T12:11:18.203Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12866 vulnerable 2026-06-08 05:17:59.483132 Details available
A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079.
Published: 2020-06-24T12:52:23.000Z
Updated: 2024-08-04T12:11:18.232Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12865 vulnerable 2026-06-08 05:17:59.482429 Details available
A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084.
Published: 2020-06-24T12:52:38.000Z
Updated: 2024-08-04T12:11:18.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12864 vulnerable 2026-06-08 05:17:59.473528 Details available
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-081.
Published: 2020-06-24T12:52:44.000Z
Updated: 2024-08-04T12:11:18.240Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12863 vulnerable 2026-06-08 05:17:59.472920 Details available
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-083.
Published: 2020-06-24T12:52:51.000Z
Updated: 2024-08-04T12:11:18.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12862 vulnerable 2026-06-08 05:17:59.472005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12861 vulnerable 2026-06-08 05:17:59.471148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.