CVE-2021-34055: Buffer Overflow

Q: What is CVE-2021-34055?

CVE-2021-34055 is a vulnerability in jhead 3.06 that allows buffer overflow via exif.c in the Put16u function.

Q: What is the severity of CVE-2021-34055?

CVE-2021-34055 has a severity score of 7.8, which is considered high.

Q: How does CVE-2021-34055 affect jhead?

CVE-2021-34055 affects jhead 3.06, allowing buffer overflow via exif.c in the Put16u function.

Q: Is there a fix available for CVE-2021-34055?

Yes, there are fixes available for CVE-2021-34055. Please refer to the reference links for more information and remediation steps.

Q: Where can I find more information about CVE-2021-34055?

You can find more information about CVE-2021-34055 in the reference links provided.

Published Nov 4, 2022

Updated

jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u.

Affected Software

5 affected componentsFixes available

debian/jhead<=1:3.00-8, <=1:3.06.0.1-4

1:3.06.0.1-51:3.04-6+deb11u1

Jhead Project Jhead=3.06

Debian Debian Linux=10.0

Debian Debian Linux=11.0

debian/jhead

1:3.06.0.1-61:3.08-3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/jhead to a version that resolves this vulnerability.
Fixed in 1:3.06.0.1-5Fixed in 1:3.04-6+deb11u1
Upgrade
Upgrade debian/jhead to a version that resolves this vulnerability.
Fixed in 1:3.06.0.1-6Fixed in 1:3.08-3

Event History

Nov 4, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Parent advisories

This vulnerability appears in the following advisories.

DSA-5294

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-3219-1

Frequently Asked Questions

What is CVE-2021-34055?