CVE-2021-3496

A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file.

Updated jhead package fixes security vulnerabilities:

jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c (CVE-2020-6624).

jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c (CVE-2020-6625).

A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file (CVE-2021-3496).

This update for jhead fixes the following issues:

• CVE-2021-3496: Fixed heap-based buffer overflow in Get16u() in exif.c (bsc#1184756)

This update for jhead fixes the following issues:

• CVE-2021-3496: Fixed heap-based buffer overflow in Get16u() in exif.c (bsc#1184756)

This update was imported from the openSUSE:Leap:15.2:Update update project.

This update for jhead fixes the following issues:

jhead was updated to 3.06.0.1

• lot of fuzztest fixes
• Apply a whole bunch of patches from Debian.
• Spell check and fuzz test stuff from Debian, nothing useful to human users.
• Add option to set exif date from date from another file.
• Bug fixes relating to fuzz testing.
• Fix bug where thumbnail replacement DID NOT WORK.
• Fix bug when no orientation tag is present
• Fix bug of not clearing exif information when processing images with an without exif data in one invocation.
• Remove some unnecessary warnings with some types of GPS data
• Remove multiple copies of the same type of section when deleting section types

This update for jhead fixes the following issues:

jhead was updated to 3.06.0.1

• lot of fuzztest fixes
• Apply a whole bunch of patches from Debian.
• Spell check and fuzz test stuff from Debian, nothing useful to human users.
• Add option to set exif date from date from another file.
• Bug fixes relating to fuzz testing.
• Fix bug where thumbnail replacement DID NOT WORK.
• Fix bug when no orientation tag is present
• Fix bug of not clearing exif information when processing images with an without exif data in one invocation.
• Remove some unnecessary warnings with some types of GPS data
• Remove multiple copies of the same type of section when deleting section types

This update was imported from the openSUSE:Leap:15.2:Update update project.

These are all security issues fixed in the jhead-3.06.0.1-1.3 package on the GA media of openSUSE Tumbleweed.

It was discovered that Jhead did not properly handle certain crafted Canon images when processing them. An attacker could possibly use this issue to crash Jhead, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-3496)

It was discovered that Jhead did not properly handle certain crafted images when printing Canon-specific information. An attacker could possibly use this issue to crash Jhead, resulting in a denial of service. This issue only affected Ubuntu 20.04. (CVE-2021-28275)

It was discovered that Jhead did not properly handle certain crafted images when removing unknown sections. An attacker could possibly use this issue to crash Jhead, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-28277)

Kyle Brown discovered that Jhead did not properly handle certain crafted images when editing their comments. An attacker could possibly use this to crash Jhead, resulting in a denial of service. (LP: #2020068)