Lucene search
GitHub Advisory DatabaseGHSA-J6F7-G425-4GMXHistoryMay 14, 2022 - 2:05 a.m.
Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin
2022-05-1402:05:20
GitHub Advisory Database
github.com
6
pillow
jpeg2kimageplugin
vulnerability
denial of service
crafted image
software
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.7
Confidence
High
EPSS
0.003
Percentile
71.6%
The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
Affected configurations
Node
pillowRange<2.5.3
Related
cvelist
cvelist
CVE-2014-3598
2015-05-01 15:00:00
prion
prion
Code injection
2015-05-01 15:59:00
nvd
nvd
CVE-2014-3598
2015-05-01 15:59:00
cve
cve
CVE-2014-3598
2015-05-01 15:59:00
ubuntucve
ubuntucve
CVE-2014-3598
2015-05-01 00:00:00
debiancve
debiancve
CVE-2014-3598
2015-05-01 15:59:00
osv
osv
PYSEC-2015-15
2015-05-01 15:59:00
python-Pillow-3.1.1-4.1 on GA media
2024-06-15 00:00:00
python3-Pillow-3.4.2-1.1 on GA media
2024-06-15 00:00:00
nessus
nessus
openSUSE Security Update : python-Pillow (openSUSE-2015-337)
2015-04-30 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.7
Confidence
High
EPSS
0.003
Percentile
71.6%
Related for GHSA-J6F7-G425-4GMX