cve/2020/CVE-2020-12867.md

CVE-2020-12867

Description

A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075.

POC

Reference

• https://gitlab.com/sane-project/backends/-/issues/279#issue-1-ghsl-2020-075-null-pointer-dereference-in-sanei_epson_net_read
• https://gitlab.com/sane-project/backends/-/issues/279#issue-1-ghsl-2020-075-null-pointer-dereference-in-sanei_epson_net_read
• https://securitylab.github.com/advisories/GHSL-2020-075-libsane
• https://securitylab.github.com/advisories/GHSL-2020-075-libsane

Github

• https://github.com/Live-Hack-CVE/CVE-2020-12867