2017-05-31
ALT-BU-2017-3148-1
Branch p8 update bulletin.
Closed vulnerabilities
Published: 2016-12-16
BDU:2018-00027
Уязвимость пакета sane-backends, связанная с недостаточной защитой служебных данных, позволяющая нарушителю нарушить конфиденциальность данных
Severity: HIGH (7.5)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References:
Published: 2017-03-20
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-6318
saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CONTROL_OPTION packet.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References:
- [sane-devel] 20170219 Bug#854804: saned: SANE_NET_CONTROL_OPTION response packet may contain memory contents of the server
- [sane-devel] 20170219 Bug#854804: saned: SANE_NET_CONTROL_OPTION response packet may contain memory contents of the server
- [sane-devel] 20170225 CVE-2017-6318 (old: Bug#854804: saned: SANE_NET_CONTROL_OPTION response packet may contain memory contents of the server)
- [sane-devel] 20170225 CVE-2017-6318 (old: Bug#854804: saned: SANE_NET_CONTROL_OPTION response packet may contain memory contents of the server)
- openSUSE-SU-2017:0649
- openSUSE-SU-2017:0649
- 97028
- 97028
- https://alioth.debian.org/tracker/index.php?func=detail&aid=315576
- https://alioth.debian.org/tracker/index.php?func=detail&aid=315576
- [sane-devel] 20170211 Bug#854804: saned: SANE_NET_CONTROL_OPTION response packet may contain memory contents of the server
- [sane-devel] 20170211 Bug#854804: saned: SANE_NET_CONTROL_OPTION response packet may contain memory contents of the server
- USN-4470-1
- USN-4470-1
Package python-module-six updated to version 1.10.0-alt7 for branch p8 in task 183568.
Closed bugs
Ошибка обновления