Lucene search
HistoryMay 01, 2015 - 3:59 p.m.
CVE-2014-3598
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.4
Confidence
High
EPSS
0.003
Percentile
71.6%
The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
Affected configurations
Node
opensuseopensuseMatch13.2
Node
pythonpillowRange≤2.5.2
Related
cvelist
cvelist
CVE-2014-3598
2015-05-01 15:00:00
github
github
Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin
2022-05-14 02:05:20
prion
prion
Code injection
2015-05-01 15:59:00
cve
cve
CVE-2014-3598
2015-05-01 15:59:00
ubuntucve
ubuntucve
CVE-2014-3598
2015-05-01 00:00:00
debiancve
debiancve
CVE-2014-3598
2015-05-01 15:59:00
osv
osv
PYSEC-2015-15
2015-05-01 15:59:00
python-Pillow-3.1.1-4.1 on GA media
2024-06-15 00:00:00
python3-Pillow-3.4.2-1.1 on GA media
2024-06-15 00:00:00
nessus
nessus
openSUSE Security Update : python-Pillow (openSUSE-2015-337)
2015-04-30 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.4
Confidence
High
EPSS
0.003
Percentile
71.6%
Related for NVD:CVE-2014-3598