Lucene search
+L

6327 matches found

Fedora
Fedora
•added 2022/11/10 10:48 p.m.•35 views

[SECURITY] Fedora 37 Update: jhead-3.06.0.1-5.fc37

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

7.8CVSS1.9AI score0.00466EPSS
SaveExploits1
NVD
NVD
•added 2022/11/08 9:15 p.m.•27 views

CVE-2022-32608

In jpeg, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07388753; Issue ID: ALPS07388753...

6.4CVSS0.00102EPSS
SaveExploits0References1
OSV
OSV
•added 2022/11/08 9:15 p.m.•9 views

CVE-2022-32608

In jpeg, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07388753; Issue ID: ALPS07388753...

6.4CVSS5.9AI score0.00102EPSS
SaveExploits0References1
Prion
Prion
•added 2022/11/08 9:15 p.m.•27 views

Race condition

In jpeg, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07388753; Issue ID: ALPS07388753...

3.4CVSS6.6AI score0.00102EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/08 12:00 a.m.•10 views

CVE-2022-32608

In jpeg, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07388753; Issue ID: ALPS07388753...

6.7AI score0.00102EPSS
SaveExploits0References1
CVE
CVE
•added 2022/11/08 12:00 a.m.•66 views

CVE-2022-32608

CVE-2022-32608 describes a race-condition–driven use-after-free in the jpeg component that can allow local escalation of privilege to SYSTEM. Exploitation is possible without user interaction, with local access required. Reported patch/identifier: ALPS07388753 (Issue ID: ALPS07388753). Connected ...

6.4CVSS6.6AI score0.00102EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/11/08 12:00 a.m.•41 views

CVE-2022-32608

In jpeg, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07388753; Issue ID: ALPS07388753...

6.8AI score0.00102EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/11/08 12:00 a.m.•14 views

PT-2022-21406 · Jpeg · Jpeg

Name of the Vulnerable Software and Affected Versions: jpeg affected versions not specified Description: The issue is related to a possible use after free due to a race condition. This could lead to local escalation of privilege, with System execution privileges needed. User interaction is not...

6.4CVSS6.4AI score0.00102EPSS
SaveExploits0References2
Snyk
Snyk
•added 2022/11/02 2:36 p.m.•5 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in stbijpegload. Remediation There is no fixed version for stb. References - GitHub Issue Credit: bufanremi...

8.1CVSS7AI score0.00831EPSS
SaveExploits1References2
OSV
OSV
•added 2022/11/02 1:15 p.m.•3 views

DEBIAN-CVE-2021-37789

stbimage.h 2.27 has a heap-based buffer over in stbijpegload, leading to Information Disclosure or Denial of Service...

8.1CVSS7.9AI score0.00831EPSS
SaveExploits1References1
OSV
OSV
•added 2022/11/02 1:15 p.m.•17 views

UBUNTU-CVE-2021-37789

stbimage.h 2.27 has a heap-based buffer over in stbijpegload, leading to Information Disclosure or Denial of Service...

8.1CVSS7.4AI score0.00831EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/11/02 12:00 a.m.•16 views

stb 缓冲区错误漏洞

stb is a single-file public domain library for C/C++. stbimage.h is one of the image loaders. A security vulnerability exists in stbimage.h version 2.27, which stems from a buffer overflow problem in stbijpegload...

8.1CVSS7.9AI score0.00831EPSS
SaveExploits1References5
Gentoo Linux
Gentoo Linux
•added 2022/10/31 12:00 a.m.•40 views

libjxl: Denial of Service

Background libjxl is the JPEG XL image format reference implementation. Description libjxl contains an unecessary assertion in jxl::LowMemoryRenderPipeline::Init. Impact An attacker can cause a denial of service of the libjxl process via a crafted input file. Workaround There is no known workarou...

6.5CVSS4.1AI score0.00886EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
•added 2022/10/31 12:00 a.m.•63 views

JHead: Multiple Vulnerabilities

Background JHead is an EXIF JPEG header manipulation tool. Description Multiple vulnerabilities have been discovered in JHead. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround a...

7.8CVSS1.9AI score0.01127EPSS
SaveExploits4
Gentoo Linux
Gentoo Linux
•added 2022/10/31 12:00 a.m.•37 views

exif: Denial of Service

Background libexif is a library for parsing, editing and saving Exif metadata from images. exif is a small command line interface for libexif. Description There is a bug in exif's XML output format which can result in a null pointer dereference when outputting crafted JPEG EXIF data. Impact A...

5.5CVSS2.9AI score0.01268EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2022/10/27 12:00 a.m.•22 views

Fedora: Security Advisory for jhead (FEDORA-2022-61ec901852)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.7AI score0.00466EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/10/27 12:00 a.m.•27 views

Fedora: Security Advisory for jhead (FEDORA-2022-1d9133bc8e)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.7AI score0.00466EPSS
SaveExploits1References2
Fedora
Fedora
•added 2022/10/26 5:35 p.m.•26 views

[SECURITY] Fedora 35 Update: jhead-3.06.0.1-5.fc35

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

7.8CVSS1.9AI score0.00466EPSS
SaveExploits1
Fedora
Fedora
•added 2022/10/26 5:29 p.m.•32 views

[SECURITY] Fedora 36 Update: jhead-3.06.0.1-5.fc36

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

7.8CVSS1.9AI score0.00466EPSS
SaveExploits1
NVD
NVD
•added 2022/10/17 6:15 p.m.•20 views

CVE-2022-41751

Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option...

7.8CVSS0.00466EPSS
SaveExploits1References8
Rows per page
Query Builder