cbcvebase.
CVE-2021-34055
published 2022-11-04

CVE-2021-34055: jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u.

PriorityP434high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.42%
34.3th percentile
jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u.

Affected

13 ranges
VendorProductVersion rangeFixed in
debiandebian_linux——
debiandebian_linux——
debianjhead< jhead 1:3.06.0.1-5 (bookworm)jhead 1:3.06.0.1-5 (bookworm)
jhead_projectjhead——
jhead_projectjhead>= 0 < 1:3.04-6+deb11u11:3.04-6+deb11u1
jhead_projectjhead>= 0 < 1:3.06.0.1-51:3.06.0.1-5
jhead_projectjhead>= 0 < 1:3.06.0.1-51:3.06.0.1-5
jhead_projectjhead>= 0 < 1:3.06.0.1-51:3.06.0.1-5
jhead_projectjhead>= 0 < 1:3.00-8~ubuntu0.21:3.00-8~ubuntu0.2
jhead_projectjhead>= 0 < 1:3.04-1ubuntu0.21:3.04-1ubuntu0.2
jhead_projectjhead>= 0 < 1:3.06.0.1-2ubuntu0.22.04.11:3.06.0.1-2ubuntu0.22.04.1
jhead_projectjhead>= 0 < 1:2.97-1+deb8u2ubuntu0.1~esm21:2.97-1+deb8u2ubuntu0.1~esm2
jhead_projectjhead>= 0 < 1:3.00-4+deb9u1ubuntu0.1~esm21:3.00-4+deb9u1ubuntu0.1~esm2

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_ubuntu7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.