CVE-2022-41751

概要

参考情報

• Matthias-Wandel/jhead · Product
• Matthias-Wandel/jhead · Exploit
• Matthias-Wandel/jhead#57 · Exploit
• lists.debian.org/debian-lts-announce/2022/12/msg00004.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NM6FET4ZNWV4EQGKZTLZFWTNVODGVOK
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG26AD7KJAY5B6L6OERSGL4FRXJE3GOB
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAVB3ZX7E5ULEXESU5NXZIAHY6CVGCHB
• debian.org/security/2022/dsa-5294 · Third Party Advisory

jhead のその他の脆弱性

• CVE-2025-44906高 7.8jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c.
• CVE-2022-28550緊急 9.8Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer …
• CVE-2021-34055高 7.8jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u.
• CVE-2021-28278高 7.8A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c.
• CVE-2021-28277高 7.8A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUnknownSections functi…