CVE-2003-0775

saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service (memory consumption or crash).

Affected Software

Name	Vendor	Start Version	End Version
Sane	Sane	1.0.0 (including)	1.0.0 (including)
Sane	Sane	1.0.1 (including)	1.0.1 (including)
Sane	Sane	1.0.2 (including)	1.0.2 (including)
Sane	Sane	1.0.3 (including)	1.0.3 (including)
Sane	Sane	1.0.4 (including)	1.0.4 (including)
Sane	Sane	1.0.5 (including)	1.0.5 (including)
Sane	Sane	1.0.6 (including)	1.0.6 (including)
Sane	Sane	1.0.7 (including)	1.0.7 (including)
Sane	Sane	1.0.7_beta1 (including)	1.0.7_beta1 (including)
Sane	Sane	1.0.7_beta2 (including)	1.0.7_beta2 (including)
Sane	Sane	1.0.8 (including)	1.0.8 (including)
Sane	Sane	1.0.9 (including)	1.0.9 (including)
Sane-backend	Sane	1.0.10 (including)	1.0.10 (including)
Red Hat Enterprise Linux AS (Advanced Server) version 2.1	RedHat		*
Red Hat Enterprise Linux ES version 2.1	RedHat		*
Red Hat Enterprise Linux WS version 2.1	RedHat		*
Red Hat Linux 7.1	RedHat		*
Red Hat Linux 7.2	RedHat		*
Red Hat Linux 7.3	RedHat		*
Red Hat Linux 8.0	RedHat		*
Red Hat Linux Advanced Workstation 2.1	RedHat		*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2003-0775
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References