An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the     sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product     should be starting with an attacker-controlled configuration file. (CVE-2023-46047)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote NewStart CGSL host, running version MAIN 7.02, has sane-backends packages installed that are affected by a vulnerability:

  - An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the     sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product     should be starting with an attacker-controlled configuration file. (CVE-2023-46047)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0303 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-46052:
    Sane 1.2.1 heap bounds overwrite in init_options() from backend/test.c via a long init_mode string in a     configuration file. NOTE: this is disputed because there is no expectation that test.c code should be     executed with an attacker-controlled configuration file.

    CVE-2023-46047:
    An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the     sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product     should be starting with an attacker-controlled configuration file.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
258960	Linux Distros Unpatched Vulnerability : CVE-2023-46047	Nessus	Misc.	high
242711	NewStart CGSL MAIN 7.02 : sane-backends Vulnerability (NS-SA-2025-0135)	Nessus	NewStart CGSL Local Security Checks	high
238564	TencentOS Server 4: sane-backends (TSSA-2024:0303)	Nessus	Tencent Local Security Checks	high

Detections

Analytics

CVE-2023-46047

high

Tenable Plugins

high

high

high