Search CVE reports


Toggle filters

11 – 20 of 25 results


CVE-2020-6625

Medium priority

Some fixes available 4 of 9

jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.

1 affected package

jhead

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
jhead Not affected Fixed Fixed
Show less packages

CVE-2020-6624

Medium priority

Some fixes available 4 of 9

jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.

1 affected package

jhead

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
jhead Not affected Fixed Fixed
Show less packages

CVE-2020-28840

Medium priority
Needs evaluation

Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of service (DoS).

1 affected package

jhead

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
jhead Not affected Not affected Needs evaluation Needs evaluation
Show less packages

CVE-2020-26208

Low priority
Fixed

JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on...

1 affected package

jhead

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
jhead Not affected Fixed Fixed
Show less packages

CVE-2019-19035

Medium priority

Some fixes available 3 of 5

jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and process_SOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file.

1 affected package

jhead

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
jhead Not affected Not affected Fixed
Show less packages

CVE-2019-1010302

Low priority

Some fixes available 2 of 4

jhead 3.03 is affected by: Incorrect Access Control. The impact is: Denial of service. The component is: iptc.c Line 122 show_IPTC(). The attack vector is: the victim must open a specially crafted JPEG file.

1 affected package

jhead

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
jhead Not affected Not affected Fixed
Show less packages

CVE-2019-1010301

Low priority

Some fixes available 2 of 4

jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 ProcessGpsInfo(). The attack vector is: Open a specially crafted JPEG file.

1 affected package

jhead

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
jhead Not affected Not affected Fixed
Show less packages

CVE-2018-6612

Medium priority

Some fixes available 2 of 3

An integer underflow bug in the process_EXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a...

1 affected package

jhead

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
jhead Not affected Not affected Not affected
Show less packages

CVE-2018-17088

Medium priority
Fixed

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because there is an integer overflow during a...

1 affected package

jhead

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
jhead Fixed
Show less packages

CVE-2018-16554

Low priority
Fixed

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and...

1 affected package

jhead

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
jhead Fixed
Show less packages