Skip to content
OpenAdvisories
Unscored USN-6113-1 1 CVE

Jhead vulnerability

Published May 30, 2023 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Jhead did not properly handle certain crafted images
while processing the Exif markers. An attacker could possibly use this
issue to crash Jhead, resulting in a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS jhead 1:2.97-1+deb8u2ubuntu0.1~esm4
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS jhead 1:3.00-4+deb9u1ubuntu0.1~esm4

Vulnerabilities 1

  • Unscored —
    CVE-2018-6612

    An integer underflow bug in the process_EXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-…

    jhead jhead Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-6612