Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-9601
HistoryJan 16, 2015 - 4:59 p.m.

CVE-2014-9601

2015-01-1616:59:17
CWE-20
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.8 Medium

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.2%

JSON

Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.

Affected configurations

NVD
Node
pythonpillowRange≤2.6.2
Node
oraclesolarisMatch11.2
Node
fedoraprojectfedoraMatch21
OR
opensuseopensuseMatch13.2

Related

cve 1
github 1
openvas 13
prion 1
ubuntucve 1
nessus 18
fedora 1
osv 2
debiancve 1
mageia 1
cvelist 1
ubuntu 4
securityvulns 2
amazon 1
cve
cve
CVE-2014-9601
2015-01-16 16:59:17
github
github
Pillow denial of service via PNG bomb
2022-05-14 02:05:56
openvas
openvas
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2163)
2021-07-07 00:00:00
Fedora Update for python-pillow FEDORA-2015-0667
2015-01-22 00:00:00
Mageia: Security Advisory (MGASA-2015-0039)
2022-01-28 00:00:00
prion
prion
Code injection
2015-01-16 16:59:00
ubuntucve
ubuntucve
CVE-2014-9601
2015-01-16 00:00:00
nessus
nessus
Fedora 21 : python-pillow-2.6.1-2.fc21 (2015-0667)
2015-01-22 00:00:00
EulerOS Virtualization 3.0.2.2 : python-pillow (EulerOS-SA-2021-2163)
2021-07-06 00:00:00
EulerOS Virtualization 3.0.6.6 : python-pillow (EulerOS-SA-2021-1515)
2021-03-04 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: python-pillow-2.6.1-2.fc21
2015-01-21 23:07:12
osv
osv
PYSEC-2015-16
2015-01-16 16:59:00
Pillow denial of service via PNG bomb
2022-05-14 02:05:56
debiancve
debiancve
CVE-2014-9601
2015-01-16 16:59:17
mageia
mageia
Updated python-pillow packages fix CVE-2014-9601
2015-01-28 00:08:29
cvelist
cvelist
CVE-2014-9601
2015-01-16 16:00:00
ubuntu
ubuntu
Pillow vulnerabilities
2017-03-13 00:00:00
Python Imaging Library vulnerabilities
2017-03-13 00:00:00
Pillow regresssion
2016-09-30 00:00:00
securityvulns
securityvulns
pillow multiple security vulnerabilities
2015-04-19 00:00:00
[ MDVSA-2015:099 ] python-pillow
2015-04-19 00:00:00
amazon
amazon
Important: python-pillow
2023-06-05 16:39:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.8 Medium

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.2%

JSON
Related for NVD:CVE-2014-9601
cve1github1openvas13prion1ubuntucve1nessus18fedora1osv2debiancve1mageia1cvelist1ubuntu4securityvulns2amazon1