Test ID:	1.3.6.1.4.1.25623.1.1.12.2023.6098.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-6098-1)
Summary:	The remote host is missing an update for the 'jhead' package(s) announced via the USN-6098-1 advisory.
Description:	Summary: The remote host is missing an update for the 'jhead' package(s) announced via the USN-6098-1 advisory. Vulnerability Insight: It was discovered that Jhead did not properly handle certain crafted images while processing the JFIF markers. An attacker could cause Jhead to crash. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2019-19035) It was discovered that Jhead did not properly handle certain crafted images while processing longitude tags. An attacker could cause Jhead to crash. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-1010301) It was discovered that Jhead did not properly handle certain crafted images while processing IPTC data. An attacker could cause Jhead to crash. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-1010302) Binbin Li discovered that Jhead did not properly handle certain crafted images while processing the DQT data. An attacker could cause Jhead to crash. (CVE-2020-6624) Binbin Li discovered that Jhead did not properly handle certain crafted images while processing longitude data. An attacker could cause Jhead to crash. (CVE-2020-6625) Feng Zhao Yang discovered that Jhead did not properly handle certain crafted images while reading JPEG sections. An attacker could cause Jhead to crash. (CVE-2020-26208) It was discovered that Jhead did not properly handle certain crafted images while processing Canon images. An attacker could cause Jhead to crash. (CVE-2021-28276) It was discovered that Jhead did not properly handle certain crafted images when removing a certain type of sections. An attacker could cause Jhead to crash. (CVE-2021-28278) Affected Software/OS: 'jhead' package(s) on Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-1010301 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WVQTORTGQE56XXC6OVHQCSCUGABRMQZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YTGUHTJTQ6EKEPDXFSKZKVLUJC4UAPBQ/ https://security.gentoo.org/glsa/202007-17 https://bugzilla.redhat.com/show_bug.cgi?id=1679952 https://launchpadlibrarian.net/435112680/32_crash_in_gpsinfo https://lists.debian.org/debian-lts-announce/2019/12/msg00037.html Common Vulnerability Exposure (CVE) ID: CVE-2019-1010302 https://bugzilla.redhat.com/show_bug.cgi?id=1679978 Common Vulnerability Exposure (CVE) ID: CVE-2019-19035 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOL6LCMEVOOB342EJ4TKWTPJAJPJSVWH/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GPNV43VBUCMUBRBKPJBY4DDSYLHQ2GFR/ https://bugzilla.redhat.com/show_bug.cgi?id=1765647 Common Vulnerability Exposure (CVE) ID: CVE-2020-26208 https://github.com/F-ZhaoYang/jhead/security/advisories/GHSA-7pr6-xq4f-qhgc https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1900821 https://github.com/F-ZhaoYang/jhead/commit/5186ddcf9e35a7aa0ff0539489a930434a1325f4 https://github.com/Matthias-Wandel/jhead/issues/7 Common Vulnerability Exposure (CVE) ID: CVE-2020-6624 https://bugs.gentoo.org/711220#c3 https://bugs.gentoo.org/876247#c0 https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744 Common Vulnerability Exposure (CVE) ID: CVE-2020-6625 https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858746 Common Vulnerability Exposure (CVE) ID: CVE-2021-28276 https://security.gentoo.org/glsa/202210-17 https://github.com/Matthias-Wandel/jhead/issues/1 Common Vulnerability Exposure (CVE) ID: CVE-2021-28278 https://github.com/Matthias-Wandel/jhead/issues/15
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.