Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0371-1 advisory.

  - Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and     then using the regeneration -rgt50 option. (CVE-2022-41751)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6108-1 advisory.

  - jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u. (CVE-2021-34055)

  - Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and     then using the regeneration -rgt50 option. (CVE-2022-41751)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0054-1 advisory.

  - Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and     then using the regeneration -rgt50 option. (CVE-2022-41751)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-61ec901852 advisory.

  - Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and     then using the regeneration -rgt50 option. (CVE-2022-41751)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-1d9133bc8e advisory.

  - Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and     then using the regeneration -rgt50 option. (CVE-2022-41751)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5294 advisory.

  - jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u. (CVE-2021-34055)

  - Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and     then using the regeneration -rgt50 option. (CVE-2022-41751)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3219 advisory.

  - jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u. (CVE-2021-34055)

  - Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and     then using the regeneration -rgt50 option. (CVE-2022-41751)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:10179-1 advisory.

  - Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and     then using the regeneration -rgt50 option. (CVE-2022-41751)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:10178-1 advisory.

  - Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and     then using the regeneration -rgt50 option. (CVE-2022-41751)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
185880	openSUSE 15 Security Update : jhead (openSUSE-SU-2023:0371-1)	Nessus	SuSE Local Security Checks	high
176361	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Jhead vulnerabilities (USN-6108-1)	Nessus	Ubuntu Local Security Checks	high
171686	openSUSE 15 Security Update : jhead (openSUSE-SU-2023:0054-1)	Nessus	SuSE Local Security Checks	high
169144	Fedora 36 : jhead (2022-61ec901852)	Nessus	Fedora Local Security Checks	high
169121	Fedora 35 : jhead (2022-1d9133bc8e)	Nessus	Fedora Local Security Checks	high
168401	Debian DSA-5294-1 : jhead - security update	Nessus	Debian Local Security Checks	high
168389	Debian DLA-3219-1 : jhead - LTS security update	Nessus	Debian Local Security Checks	high
166758	openSUSE 15 Security Update : jhead (openSUSE-SU-2022:10179-1)	Nessus	SuSE Local Security Checks	high
166757	openSUSE 15 Security Update : jhead (openSUSE-SU-2022:10178-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2022-41751

high

Tenable Plugins

high

high

high

high

high

high

high

high

high