Lucene search
+L

550 matches found

Fedora
Fedora
•added 2018/03/06 5:33 p.m.•41 views

[SECURITY] Fedora 27 Update: jhead-3.00-7.fc27

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

5.5CVSS1.9AI score0.01131EPSS
SaveExploits0
OSV
OSV
•added 2018/02/26 11:40 p.m.•12 views

MGASA-2018-0146 Updated jhead package fixes security vulnerability

Updated jhead package fixes security vulnerability: An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecifie...

5.5CVSS5.6AI score0.01131EPSS
SaveExploits0References3
Mageia
Mageia
•added 2018/02/26 11:40 p.m.•53 views

Updated jhead package fixes security vulnerability

Updated jhead package fixes security vulnerability: An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecifie...

5.5CVSS4.4AI score0.01131EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/02/12 12:00 a.m.•30 views

openSUSE Security Update : jhead (openSUSE-2018-155)

This update for jhead fixes the following issues : - CVE-2018-6612: Fixed a heap-based buffer over-read boo1079349 CVE-2018-6612 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

5.5CVSS6.3AI score0.01131EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/02/05 12:00 a.m.•20 views

jhead 'process_EXIF' Function Integer Overflow Vulnerability Vulnerability

jhead is a tool for modifying JPEG file information. An integer overflow vulnerability exists in the 'processEXIF' function of the exif.c file in jhead version 3.00. A remote attacker can exploit this vulnerability to cause a denial of service with a malicious JPEG file...

5.5CVSS7AI score0.01131EPSS
SaveExploits0References1
NVD
NVD
•added 2018/02/04 3:29 p.m.•38 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS5.6AI score0.01131EPSS
SaveExploits0References2
Prion
Prion
•added 2018/02/04 3:29 p.m.•24 views

Heap overflow

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

4.3CVSS5.5AI score0.01131EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2018/02/04 3:29 p.m.•16 views

UBUNTU-CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS6.9AI score0.01131EPSS
SaveExploits0References6
OSV
OSV
•added 2018/02/04 3:29 p.m.•14 views

DEBIAN-CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS7.2AI score0.01131EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2018/02/04 3:29 p.m.•36 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS6.9AI score0.01131EPSS
SaveExploits0References5
OSV
OSV
•added 2018/02/04 3:29 p.m.•12 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS5.6AI score
SaveExploits0References2
CVE
CVE
•added 2018/02/04 3:00 p.m.•175 views

CVE-2018-6612

CVE-2018-6612 affects jhead, issue arising from an integer underflow in process_EXIF in exif.c that causes a heap-based buffer over-read when parsing JPEGs. Reports across multiple advisories indicate impact on jhead 3.00 and that updates exist (e.g., jhead updated to 3.06.x in several distributi...

5.5CVSS5.6AI score0.01131EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2018/02/04 3:00 p.m.•55 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.7AI score0.01131EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2018/02/04 3:00 p.m.•74 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS5.8AI score0.01131EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/04 12:00 a.m.•3 views

CVE-2018-6612: Out-of-bounds Read

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS6.7AI score0.01131EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/02/04 12:00 a.m.•4 views

PT-2018-17670

Name of the Vulnerable Software and Affected Versions jhead version 3.00 Description The issue is caused by an integer underflow bug in the process EXIF function of the exif.c file, which leads to a heap-based buffer over-read when processing a malicious JPEG file. This may allow a remote attacke...

5.5CVSS0.01131EPSS
SaveExploits0References34
OpenVAS
OpenVAS
•added 2018/01/11 12:00 a.m.•33 views

Debian: Security Advisory (DLA-864-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.01267EPSS
SaveExploits0References2
Mageia
Mageia
•added 2017/04/04 6:44 a.m.•41 views

Updated jhead packages fix security vulnerability

It was discovered that jhead, a tool to manipulate the non-image part of EXIF compliant JPEG files, is prone to an out-of-bounds access vulnerability, which may result in denial of service or, potentially, the execution of arbitrary code if an image with specially crafted EXIF data is processed...

7.8CVSS7AI score0.01267EPSS
SaveExploits0References3
OSV
OSV
•added 2017/04/04 6:44 a.m.•12 views

MGASA-2017-0105 Updated jhead packages fix security vulnerability

It was discovered that jhead, a tool to manipulate the non-image part of EXIF compliant JPEG files, is prone to an out-of-bounds access vulnerability, which may result in denial of service or, potentially, the execution of arbitrary code if an image with specially crafted EXIF data is processed...

7.8CVSS6.9AI score0.01267EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2017/04/03 12:00 a.m.•51 views

Debian DSA-3825-1 : jhead - security update

It was discovered that jhead, a tool to manipulate the non-image part of EXIF compliant JPEG files, is prone to an out-of-bounds access vulnerability, which may result in denial of service or, potentially, the execution of arbitrary code if an image with specially crafted EXIF data is processed...

7.8CVSS7AI score0.01267EPSS
SaveExploits0References4
Rows per page
Query Builder