CVE-2020-28840: 
NixOS vulnerability analysis and mitigation

A Buffer Overflow vulnerability was discovered in jpgfile.c in Matthias-Wandel jhead version 3.04, which allows local attackers to execute arbitrary code and cause a denial of service (DoS). The vulnerability was identified and tracked as CVE-2020-28840 (NVD).

The vulnerability is classified as a heap-buffer-overflow occurring in the process_COM function in jpgfile.c at line 51. The issue involves a buffer overflow condition that occurs during the processing of JPEG file sections. The vulnerability has received a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local access requirements with high impact potential (NVD).

The vulnerability can allow attackers to execute arbitrary code and cause denial of service conditions on affected systems. The high CVSS score indicates potential severe impacts on system confidentiality, integrity, and availability when successfully exploited (NVD).

A fix was implemented in version 3.06.0.1 of the software. The patch addresses the buffer overflow condition in the process_COM function (GitHub Commit). Users are advised to upgrade to the patched version to mitigate this vulnerability.