CVE:CVE-2022-41751
CNNVD:CNNVD-202210-1147
jhead是一款用于修改JPEG文件信息的工具。
jhead 3.06.0.1版本存在操作系统命令注入漏洞。攻击者利用该漏洞执行任意命令。
solution:Upgrade jhead_project jhead to a higher version than 3.06.0.1,and avoid the version 3.06.0.1; Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0