Lucene search
MitreCVELIST:CVE-2024-28219HistoryApr 03, 2024 - 12:00 a.m.
CVE-2024-28219
2024-04-0300:00:00
mitre
www.cve.org
buffer overflow
pillow
strcpy
strncpy
cve-2024-28219
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
7.2 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.6%
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
Related
ubuntu
ubuntu
Pillow vulnerability
2024-04-22 00:00:00
Pillow vulnerability
2024-04-29 00:00:00
Pillow vulnerability
2024-04-22 00:00:00
nessus
nessus
Ubuntu 20.04 LTS : Pillow vulnerability (USN-6744-2)
2024-04-23 00:00:00
Debian dla-3786 : python-pil - security update
2024-04-11 00:00:00
github
github
Pillow buffer overflow vulnerability
2024-04-03 03:30:30
redhatcve
redhatcve
CVE-2024-28219
2024-04-01 23:56:34
ubuntucve
ubuntucve
CVE-2024-28219
2024-04-03 00:00:00
osv
osv
pillow - security update
2024-04-10 00:00:00
pillow vulnerability
2024-04-22 13:46:57
Pillow buffer overflow vulnerability
2024-04-03 03:30:30
debiancve
debiancve
CVE-2024-28219
2024-04-03 03:15:09
cgr
cgr
CVE-2024-28219 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2024-28219 vulnerabilities
2024-06-23 15:23:54
cve
cve
CVE-2024-28219
2024-04-03 03:15:09
debian
debian
[SECURITY] [DLA 3786-1] pillow security update
2024-04-10 20:54:46
[SECURITY] [DSA 5704-1] pillow security update
2024-06-05 18:59:18
openvas
openvas
Ubuntu: Security Advisory (USN-6744-1)
2024-04-24 00:00:00
Ubuntu: Security Advisory (USN-6744-2)
2024-04-24 00:00:00
openSUSE: Security Advisory for python (SUSE-SU-2024:1154-1)
2024-04-09 00:00:00
veracode
veracode
Buffer Overflow
2024-04-04 06:01:05
alpinelinux
alpinelinux
CVE-2024-28219
2024-04-03 03:15:09
fedora
fedora
[SECURITY] Fedora 39 Update: python-pillow-10.3.0-1.fc39
2024-04-10 04:05:33
nvd
nvd
CVE-2024-28219
2024-04-03 03:15:09
mageia
mageia
Updated python-pillow packages fix security vulnerabilities
2024-04-15 21:21:57
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
2024-04-24 19:15:42
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
7.2 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.6%
Related for CVELIST:CVE-2024-28219