Lucene search
MitreCVELIST:CVE-2021-28677HistoryJun 02, 2021 - 3:18 p.m.
CVE-2021-28677
2021-06-0215:18:49
mitre
www.cve.org
9
pillow
eps
vulnerability
An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.
References
github.com/python-pillow/Pillow/pull/5377
lists.debian.org/debian-lts-announce/2021/07/msg00018.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/
pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28677-fix-eps-dos-on-open
security.gentoo.org/glsa/202107-33
Related
alpinelinux
alpinelinux
CVE-2021-28677
2021-06-02 16:15:08
osv
osv
BIT-pillow-2021-28677
2024-03-06 11:03:25
Uncontrolled Resource Consumption in Pillow
2021-06-08 18:49:36
PYSEC-2021-93
2021-06-02 16:15:00
cnvd
cnvd
Pillow Denial of Service Vulnerability (CNVD-2021-54031)
2021-06-04 00:00:00
ubuntucve
ubuntucve
CVE-2021-28677
2021-05-10 00:00:00
cve
cve
CVE-2021-28677
2021-06-02 16:15:08
prion
prion
Design/Logic Flaw
2021-06-02 16:15:00
debiancve
debiancve
CVE-2021-28677
2021-06-02 16:15:08
veracode
veracode
Denial Of Service (DoS)
2021-05-10 06:30:34
nvd
nvd
CVE-2021-28677
2021-06-02 16:15:08
redhatcve
redhatcve
CVE-2021-28677
2021-05-11 20:55:32
github
github
Uncontrolled Resource Consumption in Pillow
2021-06-08 18:49:36
nessus
nessus
EulerOS 2.0 SP5 : python-pillow (EulerOS-SA-2021-2345)
2021-09-07 00:00:00
EulerOS Virtualization 3.0.2.0 : python-pillow (EulerOS-SA-2021-2843)
2021-12-29 00:00:00
EulerOS 2.0 SP3 : python-pillow (EulerOS-SA-2021-2611)
2021-10-25 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2345)
2021-09-04 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2843)
2021-12-30 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2432)
2021-09-15 00:00:00
freebsd
freebsd
Pillow -- multiple vulnerabilities
2021-04-01 00:00:00
debian
debian
[SECURITY] [DLA 2716-1] pillow security update
2021-07-22 11:17:53
fedora
fedora
[SECURITY] Fedora 34 Update: python-pillow-8.1.2-3.fc34
2021-05-30 17:30:05
[SECURITY] Fedora 33 Update: python-pillow-7.2.0-6.fc33
2021-06-03 01:01:42
[SECURITY] Fedora 34 Update: mingw-python-pillow-8.1.2-2.fc34
2021-05-30 17:30:05
ubuntu
ubuntu
Pillow vulnerabilities
2021-05-19 00:00:00
amazon
amazon
Important: python-pillow
2023-06-05 16:39:00
mageia
mageia
Updated python-pillow packages fix security vulnerabilities
2021-08-06 12:33:48
gentoo
gentoo
Pillow: Multiple vulnerabilities
2021-07-14 00:00:00
almalinux
almalinux
Moderate: python-pillow security update
2021-11-09 08:24:34
rocky
rocky
python-pillow security update
2021-11-09 08:24:34
redhat
redhat
(RHSA-2021:4149) Moderate: python-pillow security update
2021-11-09 08:24:34