CVE-2020-12867: Null Pointer Dereference
Published Jun 1, 2020
·Updated
A NULL pointer dereference in saneiepsonnetread in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075.
Affected Software
12 affected componentsFixes available
Sane-project Sane Backends<1.0.30
Sane-project Sane Backends
Fedoraproject Fedora=32
Debian Debian Linux=9.0
openSUSE Leap=15.1
openSUSE Leap=15.2
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=20.04
All of the following
Sane-project Sane Backends<1.0.30
Sane-project Sane Backends
debian/sane-backends
1.0.31-4.11.2.1-21.3.1-31.4.0-1
Remediation
Event History
Jun 1, 2020
CVE Published
via MITRE·01:50 PM
Data Sourced
via MITRE·01:50 PM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Feb 21, 2026
Data Sourced
via Ubuntu·12:19 AM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·12:19 AM
Description
Data Sourced
via Debian·12:19 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-12867?
CVE-2020-12867 is classified as a denial of service vulnerability.
2
How do I fix CVE-2020-12867?
To fix CVE-2020-12867, upgrade to SANE Backends version 1.0.30 or later.
3
What versions are affected by CVE-2020-12867?
CVE-2020-12867 affects SANE Backends versions prior to 1.0.30.
4
Can I be attacked via CVE-2020-12867 on a local network?
Yes, a malicious device on the same local network can exploit CVE-2020-12867.
5
Which operating systems are impacted by CVE-2020-12867?
CVE-2020-12867 affects multiple distributions including Ubuntu, Debian, and openSUSE with vulnerable SANE Backends versions.