Skip to content
OpenAdvisories
Unscored CVE-2019-1010301 EUVD-2019-2037GHSA-fxpv-rf34-gwcc

jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 ProcessGpsInfo(). The at…

Published Jul 15, 2019 · Updated Aug 5, 2024 · Assigned by dwf

Vendor: jhead Product: jhead Package: jhead Package: jhead Ecosystem: Debian Ecosystem: Ubuntu

Description

jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 ProcessGpsInfo(). The attack vector is: Open a specially crafted JPEG file.

Affected products

VendorProductAffectedFixed
jhead jhead 3.03 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 jhead 1:3.03-2 —
Debian 13 jhead 1:3.03-2 —
Debian 12 jhead 1:3.03-2 —
Debian 8 jhead 1:2.97-1+deb8u2 DLA-2054-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS jhead 1:3.04-1ubuntu0.1 USN-6098-1
Ubuntu 18.04 LTS jhead 1:3.00-8~ubuntu0.1 USN-6098-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS jhead 1:3.00-4+deb9u1ubuntu0.1~esm1 USN-6098-1
Ubuntu Pro 14.04 LTS jhead 1:2.97-1+deb8u2ubuntu0.1~esm1 USN-6098-1

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP2 jhead 3.06.0.1-bp152.4.6.1 openSUSE-SU-2021:0752-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 15.2 jhead 3.06.0.1-lp152.7.6.1 openSUSE-SU-2021:0743-1

Advisories 4

References