CVE Tools
Track your stack

Sane

7 CVEs tracked since 2002. Since Jul 2002, none of them reached CISA KEV.

Sane CVEs per month

Jul 2002 to Sep 2003. Point at a month, or focus the strip and use the arrow keys.
Sane CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2002-0710
2002-08null or fewer
2002-09null or fewer
2002-10null or fewer
2002-11null or fewer
2002-12null or fewer
2003-01null or fewer
2003-02null or fewer
2003-03null or fewer
2003-04null or fewer
2003-05null or fewer
2003-06null or fewer
2003-07null or fewer
2003-08null or fewer
2003-0960

Products

The products that kept showing up in Sane's monthly top three, with their CVEs summed over those months.

  1. Sane72 months
  2. Sane-backend61 month

Latest CVEs

The 7 most recently published vulnerabilities affecting Sane.

  1. CVE-2003-0777saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of s...5.0
  2. CVE-2003-0774saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service (segmentation fault) when invalid memory is accessed.7.5
  3. CVE-2003-0773saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are rest...7.5
  4. CVE-2003-0775saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of...5.0
  5. CVE-2003-0776saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.7.5
  6. CVE-2003-0778saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumpti...5.0
  7. CVE-2001-0890Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.2.1

The record

Peak rank
#5 in Sep 2003
Busiest month shown
Sep 2003, 6 CVEs
Months with a KEV entry
0 since Jul 2002
Monthly snapshots
2 since 2002
Sane's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store