|
[Japanese]
|
JVNDB-2026-035987
|
Multiple vulnerabilities in Image Scanner Driver for Linux
|
|
Image Scanner Driver for Linux provided by PFU Limited contains multiple vulnerabilities listed below:- OS Command Injection (CWE-78) - CVE-2026-78229
- Link Following (CWE-59) - CVE-2026-81310
Nir Yehoshua of Cipher Security Labs reported these vulnerabilities to PFU Limited and coordinated. After the coordination was completed, PFU Limited reported the case to JPCERT/CC to notify users of the solution through JVN.
|
|
CVSS V3 Severity:
Base Metrics 6.7 (Medium) [Other]
- Attack Vector: Local
- Attack Complexity: High
- Privileges Required: Low
- User Interaction: Required
- Scope: Unchanged
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High
The above CVSS base scores have been assigned for CVE-2026-78229 |
CVSS v3 Severity
Base Metrics:6.6 (Medium) [Other]- Access Vector: Local
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: Required
- Scope: Unchanged
- Confidentiality Impact(C): None
- Integrity Impact(I): High
- Availability Impact(A): High
The above CVSS base scores have been assigned for CVE-2026-81310
|
|
|
image-rs
- Image Scanner Driver for Linux (SP Series) V2.0.0
- Image Scanner Driver for Linux (SP Series) V2.1.0
- Image Scanner Driver for Linux (SP Series) V2.1.1
- Image Scanner Driver for Linux (SP Series) V2.1.1-4
- Image Scanner Driver for Linux (SP Series) V2.2.0
- Image Scanner Driver for Linux (SP Series) V2.2.1
- Image Scanner Driver for Linux (SP Series) V2.2.2
- Image Scanner Driver for Linux (SP Series) V2.3.0
- Image Scanner Driver for Linux (fi Series) V2.0.0
- Image Scanner Driver for Linux (fi Series) V2.1.0
- Image Scanner Driver for Linux (fi Series) V2.1.1
- Image Scanner Driver for Linux (fi Series) V2.3.2
- Image Scanner Driver for Linux (fi Series) V2.5.0
- Image Scanner Driver for Linux (fi Series) V2.7.0
- Image Scanner Driver for Linux (fi Series) V2.7.1
- Image Scanner Driver for Linux (fi Series) V2.8.0
- Image Scanner Driver for Linux (fi Series) V2.8.1
- Image Scanner Driver for Linux (fi Series) V2.8.2
|
|
|
- An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations (CVE-2026-78229).
- An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance (CVE-2026-81310).
|
|
[Update the Software]
Update the software to the latest version according to the information provided by the developer.
|
|
PFU Limited
|
|
- Link Following(CWE-59) [Other]
- OS Command Injection(CWE-78) [Other]
|
|
- CVE-2026-78229
- CVE-2026-81310
|
|
- JVN : JVNVU#96968110
|
|
- [2026/09/30]
Web page was published
|
