Skip to content
OpenAdvisories
Unscored CVE-2020-28840 EUVD-2020-21233GHSA-h46m-86hc-7cwf

Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and caus…

Published Aug 11, 2023 · Updated Oct 9, 2024 · Assigned by mitre

Description

Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of service (DoS).

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 jhead 1:3.06.0.1-2 —
Debian 13 jhead 1:3.06.0.1-2 —
Debian 12 jhead 1:3.06.0.1-2 —
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS jhead No fix yet —
Ubuntu Pro 18.04 LTS jhead No fix yet —
Ubuntu Pro 16.04 LTS jhead No fix yet —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 14.04 LTS jhead No fix yet —

References