Vulnetix
Try Vulnetix Request Demo
CVE-2018-17088 PUBLISHED

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because there is an integer overflow during a check for whether a location exceeds the EXIF data length. This is analogous to the CVE-2016-3822 integer overflow in exif.c. This gpsinfo.c vulnerability is unrelated to the CVE-2018-16554 gpsinfo.c vulnerability.

EPSS 0.26% · 48.7th percentile

Risk Scores

EPSS Score
0.26%
48.7th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSjhead0, 1:2.97-1, 1:2.97-1+deb8u1build0.14.04.1
Ubuntu:18.04:LTSjhead0, 1:3.00-4, 1:3.00-5

Timeline

References

Open in Interactive Console →