UBUNTU-CVE-2021-28275

A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a crafted_file.

References

Affected packages

Ubuntu:Pro:20.04:LTS / jhead

Package

Name: jhead
Purl: pkg:deb/ubuntu/jhead@1:3.04-1ubuntu0.2+esm1?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.04-1ubuntu0.2+esm1

Affected versions

1:3.*

1:3.03-3

1:3.04-1

1:3.04-1ubuntu0.1

1:3.04-1ubuntu0.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "jhead",
            "binary_version": "1:3.04-1ubuntu0.2+esm1"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}