Ubuntu: Security Advisory (USN-6098-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-202007-17 : JHead: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-17 JHead: Multiple vulnerabilities Multiple vulnerabilities have been discovered in JHead. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

Updated jhead packages fix security vulnerabilities

Updated jhead package fixes security vulnerabilities: jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and processSOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file CVE-2019-19035. A vulnerability...

Fedora Update for jhead FEDORA-2019-441c2fb0d1

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 29 : jhead (2019-441c2fb0d1)

added patches to fix CVE-2019-1010301 and CVE-2019-1010302 from Debian Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Fedora 30 : jhead (2019-17b95fecd3)

added patches to fix CVE-2019-1010301 and CVE-2019-1010302 from Debian Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...

CVE-2019-1010301

jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 ProcessGpsInfo. The attack vector is: Open a specially crafted JPEG file...

CVE-2019-1010301

CVE-2019-1010301 is a vulnerability in jhead where a crafted JPEG can trigger a buffer overflow in the GPS info handling (gpsinfo.c) leading to a DoS. Several connected advisories note the issue across distros (e.g., Ubuntu/Debian openSUSE/Gentoo/MS). Remediation observed in multiple advisories i...