Описание
Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1:3.00-8~ubuntu0.2 |
| devel | not-affected | |
| esm-apps/bionic | released | 1:3.00-8~ubuntu0.2 |
| esm-apps/focal | released | 1:3.04-1ubuntu0.2 |
| esm-apps/jammy | released | 1:3.06.0.1-2ubuntu0.22.04.1 |
| esm-apps/xenial | released | 1:3.00-4+deb9u1ubuntu0.1~esm2 |
| esm-infra-legacy/trusty | released | 1:2.97-1+deb8u2ubuntu0.1~esm2 |
| focal | released | 1:3.04-1ubuntu0.2 |
| jammy | released | 1:3.06.0.1-2ubuntu0.22.04.1 |
| kinetic | released | 1:3.06.0.1-2ubuntu0.22.10.1 |
Показывать по
10
Ссылки на источники
EPSS
Процентиль: 12%
0.00041
Низкий
7.8 High
CVSS3
Связанные уязвимости
EPSS
Процентиль: 12%
0.00041
Низкий
7.8 High
CVSS3