VDB

CVE-2020-26208

CVE-2020-26208 PUBLISHED

JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting in a program crash or potentially incorrect exif information retrieval. Users are advised to upgrade. There is no known workaround for this issue.

EPSS 0.34% · 57.0th percentile

Risk Scores

EPSS Score
0.34%
57.0th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSjhead1:2.97-1+deb8u2build0.14.04.1~esm1, 1:2.97-1+deb8u1build0.14.04.1, 1:2.97-1
Ubuntu:18.04:LTSjhead*, 0, 1:3.00-4
Ubuntu:20.04:LTSjhead*, 0, 1:3.04-1
Ubuntu:Pro:16.04:LTSjhead0, 1:3.00-2, 1:3.00-3

Exploit Intelligence

Timeline

  • Feb 2, 2022 CVE Published
  • Feb 3, 2022 EPSS Score
  • Mar 28, 2022 EPSS Score
  • May 19, 2022 EPSS Score
  • Jul 11, 2022 EPSS Score
  • Sep 2, 2022 EPSS Score
  • Oct 25, 2022 EPSS Score
  • Dec 17, 2022 EPSS Score
  • Feb 7, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 1, 2023 EPSS Score
  • May 24, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›