| Package | Affected versions | Patched versions |
|---|---|---|
| sane | = 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.7_beta1= 1.0.7_beta2= 1.0.8= 1.0.9 | |
| sane-backend | = 1.0.10 |
saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free