Hash: SHA256

Package        : sane-backends
Version        : 1.0.22-7.4+deb7u1
CVE ID         : CVE-2017-6318
Debian Bug     : #854804

It was discovered that there was an issue in sane-backends, an API library for
scanners. It allowed remote attackers to obtain sensitive memory information
via a crafted SANE_NET_CONTROL_OPTION packet.

For Debian 7 "Wheezy", this issue has been fixed in sane-backends version
1.0.22-7.4+deb7u1.

We recommend that you upgrade your sane-backends packages.


Regards,

- -- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Debian LTS: DLA-940-1: sane-backends security update

May 13, 2017
It was discovered that there was an issue in sane-backends, an API library for scanners

Summary

For Debian 7 "Wheezy", this issue has been fixed in sane-backends version
1.0.22-7.4+deb7u1.

We recommend that you upgrade your sane-backends packages.


Regards,

- --
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-



Severity
Package : sane-backends
Version : 1.0.22-7.4+deb7u1
CVE ID : CVE-2017-6318
Debian Bug : #854804

Related News