CVE:CVE-2021-34055
CNNVD:CNNVD-202211-2087
jhead是一款用于修改JPEG文件信息的工具。
jhead 3.06版本存在安全漏洞，该漏洞源于攻击者可以通过其exif.c组件的Put16u函数实现缓冲区溢出。
solution:Upgrade jhead_project jhead to a higher version than 3.06,and avoid the version 3.06; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0