CVE-2020-12867

Name of the Vulnerable Software and Affected Versions SANE Backends versions prior to 1.0.30

Description The issue is related to a NULL pointer dereference in the sanei epson net read function of the SANE Backends interface, which provides access to raster image scanning devices. This can be exploited by a malicious device connected to the same local network as the victim, allowing the attacker to cause a denial of service.

Recommendations For versions prior to 1.0.30, update to version 1.0.30 or later to resolve the issue. As a temporary workaround, consider restricting access to the sanei epson net read function to minimize the risk of exploitation.