Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2020-6624 (GCVE-0-2020-6624)
Vulnerability from cvelistv5
Published
2020-01-09 00:00
Modified
2024-08-04 09:11
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.
References
▼ | URL | Tags | |
---|---|---|---|
cve@mitre.org | https://bugs.gentoo.org/711220#c3 | Issue Tracking, Third Party Advisory | |
cve@mitre.org | https://bugs.gentoo.org/876247#c0 | Issue Tracking, Third Party Advisory | |
cve@mitre.org | https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744 | Exploit, Issue Tracking, Third Party Advisory | |
cve@mitre.org | https://security.gentoo.org/glsa/202007-17 | Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://bugs.gentoo.org/711220#c3 | Issue Tracking, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://bugs.gentoo.org/876247#c0 | Issue Tracking, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744 | Exploit, Issue Tracking, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/202007-17 | Third Party Advisory |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-04T09:11:04.741Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744" }, { "name": "GLSA-202007-17", "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://security.gentoo.org/glsa/202007-17" }, { "tags": [ "x_transferred" ], "url": "https://bugs.gentoo.org/711220#c3" }, { "tags": [ "x_transferred" ], "url": "https://bugs.gentoo.org/876247#c0" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "descriptions": [ { "lang": "en", "value": "jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2022-10-12T00:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "url": "https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744" }, { "name": "GLSA-202007-17", "tags": [ "vendor-advisory" ], "url": "https://security.gentoo.org/glsa/202007-17" }, { "url": "https://bugs.gentoo.org/711220#c3" }, { "url": "https://bugs.gentoo.org/876247#c0" } ] } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2020-6624", "datePublished": "2020-01-09T00:00:00", "dateReserved": "2020-01-09T00:00:00", "dateUpdated": "2024-08-04T09:11:04.741Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2020-6624\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2020-01-09T01:15:16.743\",\"lastModified\":\"2024-11-21T05:36:03.470\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.\"},{\"lang\":\"es\",\"value\":\"jhead versiones hasta la versi\u00f3n 3.04, tiene una lectura excesiva del b\u00fafer en la regi\u00f3n heap de la memoria en la funci\u00f3n process_DQT en el archivo jpgqguess.c.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:N/A:P\",\"baseScore\":5.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:jhead_project:jhead:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"3.04\",\"matchCriteriaId\":\"55779348-3302-4C6F-BD23-69DE0331166E\"}]}]}],\"references\":[{\"url\":\"https://bugs.gentoo.org/711220#c3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://bugs.gentoo.org/876247#c0\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202007-17\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugs.gentoo.org/711220#c3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://bugs.gentoo.org/876247#c0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202007-17\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
opensuse-su-2021:0743-1
Vulnerability from csaf_opensuse
Published
2021-05-16 14:04
Modified
2021-05-16 14:04
Summary
Security update for jhead
Notes
Title of the patch
Security update for jhead
Description of the patch
This update for jhead fixes the following issues:
jhead was updated to 3.06.0.1
* lot of fuzztest fixes
* Apply a whole bunch of patches from Debian.
* Spell check and fuzz test stuff from Debian, nothing useful to
human users.
* Add option to set exif date from date from another file.
* Bug fixes relating to fuzz testing.
* Fix bug where thumbnail replacement DID NOT WORK.
* Fix bug when no orientation tag is present
* Fix bug of not clearing exif information when processing images
with an without exif data in one invocation.
* Remove some unnecessary warnings with some types of GPS data
* Remove multiple copies of the same type of section when deleting
section types
Patchnames
openSUSE-2021-743
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for jhead", "title": "Title of the patch" }, { "category": "description", "text": "This update for jhead fixes the following issues:\n\njhead was updated to 3.06.0.1\n\n* lot of fuzztest fixes\n* Apply a whole bunch of patches from Debian.\n* Spell check and fuzz test stuff from Debian, nothing useful to\n human users.\n* Add option to set exif date from date from another file.\n* Bug fixes relating to fuzz testing.\n* Fix bug where thumbnail replacement DID NOT WORK.\n* Fix bug when no orientation tag is present\n* Fix bug of not clearing exif information when processing images\n with an without exif data in one invocation.\n* Remove some unnecessary warnings with some types of GPS data\n* Remove multiple copies of the same type of section when deleting\n section types\n", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2021-743", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_0743-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2021:0743-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JPTEPBJVJFSKKHSTZER2JVIMRP7MGN2C/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2021:0743-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JPTEPBJVJFSKKHSTZER2JVIMRP7MGN2C/" }, { "category": "self", "summary": "SUSE Bug 1144316", "url": "https://bugzilla.suse.com/1144316" }, { "category": "self", "summary": "SUSE Bug 1144354", "url": "https://bugzilla.suse.com/1144354" }, { "category": "self", "summary": "SUSE Bug 1160544", "url": "https://bugzilla.suse.com/1160544" }, { "category": "self", "summary": "SUSE Bug 1160547", "url": "https://bugzilla.suse.com/1160547" }, { "category": "self", "summary": "SUSE CVE CVE-2016-3822 page", "url": "https://www.suse.com/security/cve/CVE-2016-3822/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-16554 page", "url": "https://www.suse.com/security/cve/CVE-2018-16554/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-17088 page", "url": "https://www.suse.com/security/cve/CVE-2018-17088/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-6612 page", "url": "https://www.suse.com/security/cve/CVE-2018-6612/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-1010301 page", "url": "https://www.suse.com/security/cve/CVE-2019-1010301/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-1010302 page", "url": "https://www.suse.com/security/cve/CVE-2019-1010302/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-6624 page", "url": "https://www.suse.com/security/cve/CVE-2020-6624/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-6625 page", "url": "https://www.suse.com/security/cve/CVE-2020-6625/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-3496 page", "url": "https://www.suse.com/security/cve/CVE-2021-3496/" } ], "title": "Security update for jhead", "tracking": { "current_release_date": "2021-05-16T14:04:45Z", "generator": { "date": "2021-05-16T14:04:45Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2021:0743-1", "initial_release_date": "2021-05-16T14:04:45Z", "revision_history": [ { "date": "2021-05-16T14:04:45Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "jhead-3.06.0.1-lp152.7.6.1.x86_64", "product": { "name": "jhead-3.06.0.1-lp152.7.6.1.x86_64", "product_id": "jhead-3.06.0.1-lp152.7.6.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.2", "product": { "name": "openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.2" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jhead-3.06.0.1-lp152.7.6.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" }, "product_reference": "jhead-3.06.0.1-lp152.7.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-3822", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-3822" } ], "notes": [ { "category": "general", "text": "exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data, aka internal bug 28868315.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-3822", "url": "https://www.suse.com/security/cve/CVE-2016-3822" }, { "category": "external", "summary": "SUSE Bug 1108480 for CVE-2016-3822", "url": "https://bugzilla.suse.com/1108480" }, { "category": "external", "summary": "SUSE Bug 1108672 for CVE-2016-3822", "url": "https://bugzilla.suse.com/1108672" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-16T14:04:45Z", "details": "low" } ], "title": "CVE-2016-3822" }, { "cve": "CVE-2018-16554", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-16554" } ], "notes": [ { "category": "general", "text": "The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAG_GPS_ALT handling.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-16554", "url": "https://www.suse.com/security/cve/CVE-2018-16554" }, { "category": "external", "summary": "SUSE Bug 1108480 for CVE-2018-16554", "url": "https://bugzilla.suse.com/1108480" }, { "category": "external", "summary": "SUSE Bug 1108672 for CVE-2018-16554", "url": "https://bugzilla.suse.com/1108672" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-16T14:04:45Z", "details": "low" } ], "title": "CVE-2018-16554" }, { "cve": "CVE-2018-17088", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-17088" } ], "notes": [ { "category": "general", "text": "The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because there is an integer overflow during a check for whether a location exceeds the EXIF data length. This is analogous to the CVE-2016-3822 integer overflow in exif.c. This gpsinfo.c vulnerability is unrelated to the CVE-2018-16554 gpsinfo.c vulnerability.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-17088", "url": "https://www.suse.com/security/cve/CVE-2018-17088" }, { "category": "external", "summary": "SUSE Bug 1108480 for CVE-2018-17088", "url": "https://bugzilla.suse.com/1108480" }, { "category": "external", "summary": "SUSE Bug 1108672 for CVE-2018-17088", "url": "https://bugzilla.suse.com/1108672" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-16T14:04:45Z", "details": "low" } ], "title": "CVE-2018-17088" }, { "cve": "CVE-2018-6612", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-6612" } ], "notes": [ { "category": "general", "text": "An integer underflow bug in the process_EXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-6612", "url": "https://www.suse.com/security/cve/CVE-2018-6612" }, { "category": "external", "summary": "SUSE Bug 1079349 for CVE-2018-6612", "url": "https://bugzilla.suse.com/1079349" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-16T14:04:45Z", "details": "moderate" } ], "title": "CVE-2018-6612" }, { "cve": "CVE-2019-1010301", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-1010301" } ], "notes": [ { "category": "general", "text": "jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 ProcessGpsInfo(). The attack vector is: Open a specially crafted JPEG file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-1010301", "url": "https://www.suse.com/security/cve/CVE-2019-1010301" }, { "category": "external", "summary": "SUSE Bug 1144316 for CVE-2019-1010301", "url": "https://bugzilla.suse.com/1144316" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-16T14:04:45Z", "details": "low" } ], "title": "CVE-2019-1010301" }, { "cve": "CVE-2019-1010302", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-1010302" } ], "notes": [ { "category": "general", "text": "jhead 3.03 is affected by: Incorrect Access Control. The impact is: Denial of service. The component is: iptc.c Line 122 show_IPTC(). The attack vector is: the victim must open a specially crafted JPEG file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-1010302", "url": "https://www.suse.com/security/cve/CVE-2019-1010302" }, { "category": "external", "summary": "SUSE Bug 1144354 for CVE-2019-1010302", "url": "https://bugzilla.suse.com/1144354" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-16T14:04:45Z", "details": "low" } ], "title": "CVE-2019-1010302" }, { "cve": "CVE-2020-6624", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-6624" } ], "notes": [ { "category": "general", "text": "jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-6624", "url": "https://www.suse.com/security/cve/CVE-2020-6624" }, { "category": "external", "summary": "SUSE Bug 1160547 for CVE-2020-6624", "url": "https://bugzilla.suse.com/1160547" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-16T14:04:45Z", "details": "important" } ], "title": "CVE-2020-6624" }, { "cve": "CVE-2020-6625", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-6625" } ], "notes": [ { "category": "general", "text": "jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-6625", "url": "https://www.suse.com/security/cve/CVE-2020-6625" }, { "category": "external", "summary": "SUSE Bug 1160544 for CVE-2020-6625", "url": "https://bugzilla.suse.com/1160544" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-16T14:04:45Z", "details": "important" } ], "title": "CVE-2020-6625" }, { "cve": "CVE-2021-3496", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-3496" } ], "notes": [ { "category": "general", "text": "A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-3496", "url": "https://www.suse.com/security/cve/CVE-2021-3496" }, { "category": "external", "summary": "SUSE Bug 1184756 for CVE-2021-3496", "url": "https://bugzilla.suse.com/1184756" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:jhead-3.06.0.1-lp152.7.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-16T14:04:45Z", "details": "important" } ], "title": "CVE-2021-3496" } ] }
opensuse-su-2021:0752-1
Vulnerability from csaf_opensuse
Published
2021-05-19 16:05
Modified
2021-05-19 16:05
Summary
Security update for jhead
Notes
Title of the patch
Security update for jhead
Description of the patch
This update for jhead fixes the following issues:
jhead was updated to 3.06.0.1
* lot of fuzztest fixes
* Apply a whole bunch of patches from Debian.
* Spell check and fuzz test stuff from Debian, nothing useful to
human users.
* Add option to set exif date from date from another file.
* Bug fixes relating to fuzz testing.
* Fix bug where thumbnail replacement DID NOT WORK.
* Fix bug when no orientation tag is present
* Fix bug of not clearing exif information when processing images
with an without exif data in one invocation.
* Remove some unnecessary warnings with some types of GPS data
* Remove multiple copies of the same type of section when deleting
section types
This update was imported from the openSUSE:Leap:15.2:Update update project.
Patchnames
openSUSE-2021-752
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for jhead", "title": "Title of the patch" }, { "category": "description", "text": "This update for jhead fixes the following issues:\n\njhead was updated to 3.06.0.1\n\n* lot of fuzztest fixes\n* Apply a whole bunch of patches from Debian.\n* Spell check and fuzz test stuff from Debian, nothing useful to\n human users.\n* Add option to set exif date from date from another file.\n* Bug fixes relating to fuzz testing.\n* Fix bug where thumbnail replacement DID NOT WORK.\n* Fix bug when no orientation tag is present\n* Fix bug of not clearing exif information when processing images\n with an without exif data in one invocation.\n* Remove some unnecessary warnings with some types of GPS data\n* Remove multiple copies of the same type of section when deleting\n section types\n\nThis update was imported from the openSUSE:Leap:15.2:Update update project.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2021-752", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_0752-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2021:0752-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3GBTHCPCHWJ3JG5IDEDAYSW5LVUEVXYH/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2021:0752-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3GBTHCPCHWJ3JG5IDEDAYSW5LVUEVXYH/" }, { "category": "self", "summary": "SUSE Bug 1144316", "url": "https://bugzilla.suse.com/1144316" }, { "category": "self", "summary": "SUSE Bug 1144354", "url": "https://bugzilla.suse.com/1144354" }, { "category": "self", "summary": "SUSE Bug 1160544", "url": "https://bugzilla.suse.com/1160544" }, { "category": "self", "summary": "SUSE Bug 1160547", "url": "https://bugzilla.suse.com/1160547" }, { "category": "self", "summary": "SUSE CVE CVE-2016-3822 page", "url": "https://www.suse.com/security/cve/CVE-2016-3822/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-16554 page", "url": "https://www.suse.com/security/cve/CVE-2018-16554/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-17088 page", "url": "https://www.suse.com/security/cve/CVE-2018-17088/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-6612 page", "url": "https://www.suse.com/security/cve/CVE-2018-6612/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-1010301 page", "url": "https://www.suse.com/security/cve/CVE-2019-1010301/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-1010302 page", "url": "https://www.suse.com/security/cve/CVE-2019-1010302/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-6624 page", "url": "https://www.suse.com/security/cve/CVE-2020-6624/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-6625 page", "url": "https://www.suse.com/security/cve/CVE-2020-6625/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-3496 page", "url": "https://www.suse.com/security/cve/CVE-2021-3496/" } ], "title": "Security update for jhead", "tracking": { "current_release_date": "2021-05-19T16:05:20Z", "generator": { "date": "2021-05-19T16:05:20Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2021:0752-1", "initial_release_date": "2021-05-19T16:05:20Z", "revision_history": [ { "date": "2021-05-19T16:05:20Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "jhead-3.06.0.1-bp152.4.6.1.aarch64", "product": { "name": "jhead-3.06.0.1-bp152.4.6.1.aarch64", "product_id": "jhead-3.06.0.1-bp152.4.6.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "jhead-3.06.0.1-bp152.4.6.1.ppc64le", "product": { "name": "jhead-3.06.0.1-bp152.4.6.1.ppc64le", "product_id": "jhead-3.06.0.1-bp152.4.6.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "jhead-3.06.0.1-bp152.4.6.1.s390x", "product": { "name": "jhead-3.06.0.1-bp152.4.6.1.s390x", "product_id": "jhead-3.06.0.1-bp152.4.6.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "jhead-3.06.0.1-bp152.4.6.1.x86_64", "product": { "name": "jhead-3.06.0.1-bp152.4.6.1.x86_64", "product_id": "jhead-3.06.0.1-bp152.4.6.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Package Hub 15 SP2", "product": { "name": "SUSE Package Hub 15 SP2", "product_id": "SUSE Package Hub 15 SP2" } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jhead-3.06.0.1-bp152.4.6.1.aarch64 as component of SUSE Package Hub 15 SP2", "product_id": "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64" }, "product_reference": "jhead-3.06.0.1-bp152.4.6.1.aarch64", "relates_to_product_reference": "SUSE Package Hub 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "jhead-3.06.0.1-bp152.4.6.1.ppc64le as component of SUSE Package Hub 15 SP2", "product_id": "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le" }, "product_reference": "jhead-3.06.0.1-bp152.4.6.1.ppc64le", "relates_to_product_reference": "SUSE Package Hub 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "jhead-3.06.0.1-bp152.4.6.1.s390x as component of SUSE Package Hub 15 SP2", "product_id": "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x" }, "product_reference": "jhead-3.06.0.1-bp152.4.6.1.s390x", "relates_to_product_reference": "SUSE Package Hub 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "jhead-3.06.0.1-bp152.4.6.1.x86_64 as component of SUSE Package Hub 15 SP2", "product_id": "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" }, "product_reference": "jhead-3.06.0.1-bp152.4.6.1.x86_64", "relates_to_product_reference": "SUSE Package Hub 15 SP2" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-3822", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-3822" } ], "notes": [ { "category": "general", "text": "exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data, aka internal bug 28868315.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-3822", "url": "https://www.suse.com/security/cve/CVE-2016-3822" }, { "category": "external", "summary": "SUSE Bug 1108480 for CVE-2016-3822", "url": "https://bugzilla.suse.com/1108480" }, { "category": "external", "summary": "SUSE Bug 1108672 for CVE-2016-3822", "url": "https://bugzilla.suse.com/1108672" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-19T16:05:20Z", "details": "low" } ], "title": "CVE-2016-3822" }, { "cve": "CVE-2018-16554", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-16554" } ], "notes": [ { "category": "general", "text": "The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAG_GPS_ALT handling.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-16554", "url": "https://www.suse.com/security/cve/CVE-2018-16554" }, { "category": "external", "summary": "SUSE Bug 1108480 for CVE-2018-16554", "url": "https://bugzilla.suse.com/1108480" }, { "category": "external", "summary": "SUSE Bug 1108672 for CVE-2018-16554", "url": "https://bugzilla.suse.com/1108672" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-19T16:05:20Z", "details": "low" } ], "title": "CVE-2018-16554" }, { "cve": "CVE-2018-17088", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-17088" } ], "notes": [ { "category": "general", "text": "The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because there is an integer overflow during a check for whether a location exceeds the EXIF data length. This is analogous to the CVE-2016-3822 integer overflow in exif.c. This gpsinfo.c vulnerability is unrelated to the CVE-2018-16554 gpsinfo.c vulnerability.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-17088", "url": "https://www.suse.com/security/cve/CVE-2018-17088" }, { "category": "external", "summary": "SUSE Bug 1108480 for CVE-2018-17088", "url": "https://bugzilla.suse.com/1108480" }, { "category": "external", "summary": "SUSE Bug 1108672 for CVE-2018-17088", "url": "https://bugzilla.suse.com/1108672" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-19T16:05:20Z", "details": "low" } ], "title": "CVE-2018-17088" }, { "cve": "CVE-2018-6612", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-6612" } ], "notes": [ { "category": "general", "text": "An integer underflow bug in the process_EXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-6612", "url": "https://www.suse.com/security/cve/CVE-2018-6612" }, { "category": "external", "summary": "SUSE Bug 1079349 for CVE-2018-6612", "url": "https://bugzilla.suse.com/1079349" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-19T16:05:20Z", "details": "moderate" } ], "title": "CVE-2018-6612" }, { "cve": "CVE-2019-1010301", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-1010301" } ], "notes": [ { "category": "general", "text": "jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 ProcessGpsInfo(). The attack vector is: Open a specially crafted JPEG file.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-1010301", "url": "https://www.suse.com/security/cve/CVE-2019-1010301" }, { "category": "external", "summary": "SUSE Bug 1144316 for CVE-2019-1010301", "url": "https://bugzilla.suse.com/1144316" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-19T16:05:20Z", "details": "low" } ], "title": "CVE-2019-1010301" }, { "cve": "CVE-2019-1010302", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-1010302" } ], "notes": [ { "category": "general", "text": "jhead 3.03 is affected by: Incorrect Access Control. The impact is: Denial of service. The component is: iptc.c Line 122 show_IPTC(). The attack vector is: the victim must open a specially crafted JPEG file.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-1010302", "url": "https://www.suse.com/security/cve/CVE-2019-1010302" }, { "category": "external", "summary": "SUSE Bug 1144354 for CVE-2019-1010302", "url": "https://bugzilla.suse.com/1144354" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-19T16:05:20Z", "details": "low" } ], "title": "CVE-2019-1010302" }, { "cve": "CVE-2020-6624", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-6624" } ], "notes": [ { "category": "general", "text": "jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-6624", "url": "https://www.suse.com/security/cve/CVE-2020-6624" }, { "category": "external", "summary": "SUSE Bug 1160547 for CVE-2020-6624", "url": "https://bugzilla.suse.com/1160547" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-19T16:05:20Z", "details": "important" } ], "title": "CVE-2020-6624" }, { "cve": "CVE-2020-6625", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-6625" } ], "notes": [ { "category": "general", "text": "jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-6625", "url": "https://www.suse.com/security/cve/CVE-2020-6625" }, { "category": "external", "summary": "SUSE Bug 1160544 for CVE-2020-6625", "url": "https://bugzilla.suse.com/1160544" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-19T16:05:20Z", "details": "important" } ], "title": "CVE-2020-6625" }, { "cve": "CVE-2021-3496", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-3496" } ], "notes": [ { "category": "general", "text": "A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-3496", "url": "https://www.suse.com/security/cve/CVE-2021-3496" }, { "category": "external", "summary": "SUSE Bug 1184756 for CVE-2021-3496", "url": "https://bugzilla.suse.com/1184756" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.aarch64", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.ppc64le", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.s390x", "SUSE Package Hub 15 SP2:jhead-3.06.0.1-bp152.4.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-05-19T16:05:20Z", "details": "important" } ], "title": "CVE-2021-3496" } ] }
fkie_cve-2020-6624
Vulnerability from fkie_nvd
Published
2020-01-09 01:15
Modified
2024-11-21 05:36
Severity ?
Summary
jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.
References
▼ | URL | Tags | |
---|---|---|---|
cve@mitre.org | https://bugs.gentoo.org/711220#c3 | Issue Tracking, Third Party Advisory | |
cve@mitre.org | https://bugs.gentoo.org/876247#c0 | Issue Tracking, Third Party Advisory | |
cve@mitre.org | https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744 | Exploit, Issue Tracking, Third Party Advisory | |
cve@mitre.org | https://security.gentoo.org/glsa/202007-17 | Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://bugs.gentoo.org/711220#c3 | Issue Tracking, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://bugs.gentoo.org/876247#c0 | Issue Tracking, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744 | Exploit, Issue Tracking, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/202007-17 | Third Party Advisory |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
jhead_project | jhead | * |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:jhead_project:jhead:*:*:*:*:*:*:*:*", "matchCriteriaId": "55779348-3302-4C6F-BD23-69DE0331166E", "versionEndIncluding": "3.04", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c." }, { "lang": "es", "value": "jhead versiones hasta la versi\u00f3n 3.04, tiene una lectura excesiva del b\u00fafer en la regi\u00f3n heap de la memoria en la funci\u00f3n process_DQT en el archivo jpgqguess.c." } ], "id": "CVE-2020-6624", "lastModified": "2024-11-21T05:36:03.470", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2020-01-09T01:15:16.743", "references": [ { "source": "cve@mitre.org", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://bugs.gentoo.org/711220#c3" }, { "source": "cve@mitre.org", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://bugs.gentoo.org/876247#c0" }, { "source": "cve@mitre.org", "tags": [ "Exploit", "Issue Tracking", "Third Party Advisory" ], "url": "https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744" }, { "source": "cve@mitre.org", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/202007-17" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://bugs.gentoo.org/711220#c3" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://bugs.gentoo.org/876247#c0" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit", "Issue Tracking", "Third Party Advisory" ], "url": "https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/202007-17" } ], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-125" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
cnvd-2020-03263
Vulnerability from cnvd
Title: jhead堆缓冲区溢出漏洞(CNVD-2020-03263)
Description:
jhead是一款用于修改JPEG文件信息的工具。
jhead 3.04及之前版本中的jpgqguess.c文件的‘process_DQT’ 函数存在缓冲区溢出漏洞。该漏洞源于网络系统或产品在内存上执行操作时,未正确验证数据边界,导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。
Severity: 中
Formal description:
厂商尚未提供漏洞修复方案,请关注厂商主页更新: https://www.sentex.ca/~mwandel/jhead/
Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-6624
Impacted products
Name | Jhead jhead <=3.04 |
---|
{ "cves": { "cve": { "cveNumber": "CVE-2020-6624", "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2020-6624" } }, "description": "jhead\u662f\u4e00\u6b3e\u7528\u4e8e\u4fee\u6539JPEG\u6587\u4ef6\u4fe1\u606f\u7684\u5de5\u5177\u3002\n\njhead 3.04\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u7684jpgqguess.c\u6587\u4ef6\u7684\u2018process_DQT\u2019 \u51fd\u6570\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7f51\u7edc\u7cfb\u7edf\u6216\u4ea7\u54c1\u5728\u5185\u5b58\u4e0a\u6267\u884c\u64cd\u4f5c\u65f6\uff0c\u672a\u6b63\u786e\u9a8c\u8bc1\u6570\u636e\u8fb9\u754c\uff0c\u5bfc\u81f4\u5411\u5173\u8054\u7684\u5176\u4ed6\u5185\u5b58\u4f4d\u7f6e\u4e0a\u6267\u884c\u4e86\u9519\u8bef\u7684\u8bfb\u5199\u64cd\u4f5c\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u7f13\u51b2\u533a\u6ea2\u51fa\u6216\u5806\u6ea2\u51fa\u7b49\u3002", "formalWay": "\u5382\u5546\u5c1a\u672a\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u590d\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u66f4\u65b0\uff1a\r\nhttps://www.sentex.ca/~mwandel/jhead/", "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e", "number": "CNVD-2020-03263", "openTime": "2020-02-03", "products": { "product": "Jhead jhead \u003c=3.04" }, "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-6624", "serverity": "\u4e2d", "submitTime": "2020-01-09", "title": "jhead\u5806\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff08CNVD-2020-03263\uff09" }
ghsa-2w8m-f4xv-fpww
Vulnerability from github
Published
2022-05-24 17:06
Modified
2022-10-12 19:00
Severity ?
VLAI Severity ?
Details
jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.
{ "affected": [], "aliases": [ "CVE-2020-6624" ], "database_specific": { "cwe_ids": [ "CWE-125" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2020-01-09T01:15:00Z", "severity": "MODERATE" }, "details": "jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.", "id": "GHSA-2w8m-f4xv-fpww", "modified": "2022-10-12T19:00:39Z", "published": "2022-05-24T17:06:00Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6624" }, { "type": "WEB", "url": "https://bugs.gentoo.org/711220#c3" }, { "type": "WEB", "url": "https://bugs.gentoo.org/876247#c0" }, { "type": "WEB", "url": "https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/202007-17" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "type": "CVSS_V3" } ] }
gsd-2020-6624
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2020-6624", "description": "jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.", "id": "GSD-2020-6624", "references": [ "https://www.suse.com/security/cve/CVE-2020-6624.html", "https://advisories.mageia.org/CVE-2020-6624.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2020-6624" ], "details": "jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.", "id": "GSD-2020-6624", "modified": "2023-12-13T01:21:54.607166Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2020-6624", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744", "refsource": "MISC", "url": "https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744" }, { "name": "GLSA-202007-17", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/202007-17" }, { "name": "https://bugs.gentoo.org/711220#c3", "refsource": "MISC", "url": "https://bugs.gentoo.org/711220#c3" }, { "name": "https://bugs.gentoo.org/876247#c0", "refsource": "MISC", "url": "https://bugs.gentoo.org/876247#c0" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:jhead_project:jhead:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "3.04", "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2020-6624" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-125" } ] } ] }, "references": { "reference_data": [ { "name": "https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744", "refsource": "MISC", "tags": [ "Exploit", "Issue Tracking", "Third Party Advisory" ], "url": "https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744" }, { "name": "GLSA-202007-17", "refsource": "GENTOO", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/202007-17" }, { "name": "https://bugs.gentoo.org/711220#c3", "refsource": "MISC", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://bugs.gentoo.org/711220#c3" }, { "name": "https://bugs.gentoo.org/876247#c0", "refsource": "MISC", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://bugs.gentoo.org/876247#c0" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 5.2 } }, "lastModifiedDate": "2022-11-08T03:25Z", "publishedDate": "2020-01-09T01:15Z" } } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…