MGASA-2021-0328 Updated jhead packages fix security vulnerabilities

Updated jhead package fixes security vulnerabilities: jhead through 3.04 has a heap-based buffer over-read in processDQT in jpgqguess.c CVE-2020-6624. jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c CVE-2020-6625. A heap-based buffer...

SUSE: Security Advisory (SUSE-SU-2012:1132-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:1162-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:1133-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : jhead (openSUSE-2021-594)

This update for jhead fixes the following issues : - CVE-2021-3496: Fixed heap-based buffer overflow in Get16u in exif.c bsc1184756 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

OPENSUSE-SU-2021:0620-1 Security update for jhead

This update for jhead fixes the following issues: - CVE-2021-3496: Fixed heap-based buffer overflow in Get16u in exif.c bsc1184756 This update was imported from the openSUSE:Leap:15.2:Update update project...

Security update for jhead (moderate)

openSUSE Security Update: Security update for jhead Announcement ID: openSUSE-SU-2021:0620-1 Rating: moderate References: 1184756 Cross-References: CVE-2021-3496 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available. Description: This update for...

openSUSE: Security Advisory for jhead (openSUSE-SU-2021:0594-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-3496

A heap-based buffer overflow was found in jhead in version 3.06 in Get16u in exif.c when processing a crafted file...

CVE-2021-3496

A heap-based buffer overflow was found in jhead in version 3.06 in Get16u in exif.c when processing a crafted file...

OPENSUSE-SU-2021:0594-1 Security update for jhead

This update for jhead fixes the following issues: - CVE-2021-3496: Fixed heap-based buffer overflow in Get16u in exif.c bsc1184756...

CVE-2021-3496

A heap-based buffer overflow was found in jhead in version 3.06 in Get16u in exif.c when processing a crafted file...

CVE-2021-3496

CVE-2021-3496 affects jhead (v3.06). A heap-based buffer overflow occurs in Get16u() in exif.c when processing a crafted file, potentially enabling arbitrary code execution or a crash as described by multiple advisories. Related disclosures indicate this vulnerability was addressed by upgrading t...

CVE-2020-3496

CVE-2020-3496 affects Cisco Small Business Smart and Managed Switches IPv6 packet processing. Root cause: insufficient validation of incoming IPv6 traffic. Exploitation by unauthenticated remote attacker could crash the switch management CLI, causing DoS; IPv4 traffic is unaffected. Cisco advisor...

CVE-2019-3496

The CVE-2019-3496 entry describes a Remote Command Execution vulnerability in Wifi-soft UniBox controller 3.x, specifically affecting the Diagnostic Tools Controller at tools/controller/diagnostic_tools_controller. The flaw allows an attacker to execute arbitrary system commands with root privile...

CVE-2019-3496

An issue was discovered on Wifi-soft UniBox controller 3.x devices. The tools/controller/diagnostictoolscontroller Diagnostic Tools Controller is vulnerable to Remote Command Execution, allowing an attacker to execute arbitrary system commands on the server with root user privileges. Authenticati...

RHEL 6 : rubygem-openshift-origin-node (RHSA-2014:0764)

An updated rubygem-openshift-origin-node package that fixes one security issue and several bugs is now available for Red Hat OpenShift Enterprise 2.1.1. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base...

RHEL 6 : rubygem-openshift-origin-node (RHSA-2014:0762)

An updated rubygem-openshift-origin-node package that fixes one security issue is now available for Red Hat OpenShift Enterprise 1.2.8. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

RHEL 6 : rubygem-openshift-origin-node (RHSA-2014:0763)

An updated rubygem-openshift-origin-node package that fixes one security issue is now available for Red Hat OpenShift Enterprise 2.0.6. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Ubuntu 14.04 LTS / 16.04 LTS : Python vulnerability (USN-3496-3)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3496-3 advisory. USN-3496-1 fixed a vulnerability in Python2.7. This update provides the corresponding update for versions 3.4 and 3.5. Tenable has extracted the...