High severity7.8NVD Advisory· Published Oct 17, 2022· Updated Jun 17, 2026
CVE-2022-41751
CVE-2022-41751
Description
Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15- cpe:2.3:a:jhead_project:jhead:3.06.0.1:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
- Jhead/Jheaddescription
- Range: =3.06.0.1
- osv-coords7 versionspkg:rpm/opensuse/jhead&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/jhead&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/jhead&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/jhead&distro=openSUSE%20Tumbleweedpkg:rpm/suse/jhead&distro=SUSE%20Package%20Hub%2015%20SP3pkg:rpm/suse/jhead&distro=SUSE%20Package%20Hub%2015%20SP4pkg:rpm/suse/jhead&distro=SUSE%20Package%20Hub%2015%20SP5
< 3.00-bp153.3.3.1+ 6 more
- (no CPE)range: < 3.00-bp153.3.3.1
- (no CPE)range: < 3.06.0.1-bp154.2.3.1
- (no CPE)range: < 3.06.0.1-bp155.5.3.1
- (no CPE)range: < 3.06.0.1-2.1
- (no CPE)range: < 3.00-bp153.3.3.1
- (no CPE)range: < 3.06.0.1-bp154.2.3.1
- (no CPE)range: < 3.06.0.1-bp155.5.3.1
Patches
Vulnerability mechanics
References
7- github.com/Matthias-Wandel/jhead/blob/63ce118c6a59ea64ac357236a11a47aaf569d622/jhead.cnvdExploitThird Party Advisory
- github.com/Matthias-Wandel/jhead/pull/57nvdExploitIssue TrackingThird Party Advisory
- lists.debian.org/debian-lts-announce/2022/12/msg00004.htmlnvdMailing ListThird Party Advisory
- www.debian.org/security/2022/dsa-5294nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NM6FET4ZNWV4EQGKZTLZFWTNVODGVOK/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG26AD7KJAY5B6L6OERSGL4FRXJE3GOB/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAVB3ZX7E5ULEXESU5NXZIAHY6CVGCHB/nvd
News mentions
0No linked articles in our index yet.