CVE-2020-12866

Name of the Vulnerable Software and Affected Versions SANE Backends versions prior to 1.0.30

Description The issue is related to a NULL pointer dereference error in the SANE Backends implementation. This can be exploited by a malicious device connected to the same local network as the victim, allowing a remote attacker to cause a denial of service.

Recommendations For versions prior to 1.0.30, update to version 1.0.30 or later to resolve the issue. As a temporary workaround, consider restricting network access to the SANE Backends to minimize the risk of exploitation.