CVE-2020-6625 PUBLISHED

jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.

EPSS 0.59% · 69.0th percentile

Risk Scores

EPSS Score
0.59%
69.0th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSjhead1:3.00-1, 1:3.00-2, 1:3.00-3
Ubuntu:18.04:LTSjhead0, 1:3.00-5, 1:3.00-6
Ubuntu:Pro:14.04:LTSjhead0, 1:2.97-1, 1:2.97-1+deb8u1build0.14.04.1
Ubuntu:20.04:LTSjhead0, 1:3.03-3, 1:3.04-1

Timeline

References

Open in Interactive Console →