CVE-2019-1010302 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Jhead
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 73.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 15
Latest updateMay 23
Description
jhead 3.03 is affected by: Incorrect Access Control. The impact is: Denial of service. The component is: iptc.c Line 122 show_IPTC(). The attack vector is: the victim must open a specially crafted JPEG file.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages5 packages
Also affects: Debian Linux 8.0, Fedora 29, 30
🔴Vulnerability Details
3📋Vendor Advisories
2💬Community
3Bugzilla▶
CVE-2019-1010302 jhead: incorrect access control in iptc.c Line 122 show_IPTC() causing denial of service [epel-all]↗2019-08-01
Bugzilla▶
CVE-2019-1010302 jhead: incorrect access control in iptc.c Line 122 show_IPTC() causing denial of service [fedora-all]↗2019-08-01
Bugzilla▶
CVE-2019-1010302 jhead: incorrect access control in iptc.c Line 122 show_IPTC() causing denial of service↗2019-08-01