CVE-2020-28840

Опубликовано: 11 авг. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of service (DoS).

Ссылки

https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1900820
Exploit
Issue Tracking
https://github.com/F-ZhaoYang/jhead/security/advisories/GHSA-xh27-xwgj-gqw2
Exploit
https://github.com/Matthias-Wandel/jhead/commit/4827ed31c226dc5ed93603bd649e0e387a1778da
Patch
https://github.com/Matthias-Wandel/jhead/issues/8
Exploit
Issue Tracking
Patch
https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1900820
Exploit
Issue Tracking
https://github.com/F-ZhaoYang/jhead/security/advisories/GHSA-xh27-xwgj-gqw2
Exploit
https://github.com/Matthias-Wandel/jhead/commit/4827ed31c226dc5ed93603bd649e0e387a1778da
Patch
https://github.com/Matthias-Wandel/jhead/issues/8
Exploit
Issue Tracking
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:matthiaswandel:jhead:*:*:*:*:*:*:*:*

Версия до 3.04 (исключая)

EPSS

Процентиль: 7%

0.00028

Низкий

7.8 High

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVE-2020-28840

CVSS3: 7.8

ubuntu

больше 2 лет назад

Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of service (DoS).

CVE-2020-28840

CVSS3: 7.8

debian

больше 2 лет назад

Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead ve ...

GHSA-h46m-86hc-7cwf

CVSS3: 7.8

github

больше 2 лет назад

Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of service (DoS).

EPSS

Процентиль: 7%

0.00028

Низкий

7.8 High

CVSS3

Дефекты

CWE-120