CVE-2019-19911

🗓️ 05 Jan 2020 22:11:15Reported by [email protected]Type

DoS vulnerability in Pillow before 6.2.2 due to unvalidated 32-bit integer causing OverflowError or MemoryError on Windows and termination on Linu

Reporter	Title	Published	Views	Family All 47
OSV	Uncontrolled Resource Consumption in Pillow	1 Apr 202016:36	–	osv
OSV	PYSEC-2020-172	5 Jan 202022:15	–	osv
OSV	CVE-2019-19911	5 Jan 202022:15	–	osv
OSV	pillow - security update	6 Jan 202000:00	–	osv
OSV	pillow - security update	21 Feb 202000:00	–	osv
RedhatCVE	CVE-2019-19911	9 Jan 202019:09	–	redhatcve
AlpineLinux	CVE-2019-19911	5 Jan 202022:15	–	alpinelinux
UbuntuCve	CVE-2019-19911	5 Jan 202000:00	–	ubuntucve
Cvelist	CVE-2019-19911	5 Jan 202021:57	–	cvelist
Debian CVE	CVE-2019-19911	5 Jan 202022:15	–	debiancve

Nvd

Node

python pillowRange<6.2.2

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

fedoraproject fedoraMatch30

Node

canonical ubuntu_linuxMatch14.04esm

canonical ubuntu_linuxMatch16.04esm

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch19.10

Source	Link
pillow	www.pillow.readthedocs.io/en/stable/releasenotes/6.2.2.html
usn	www.usn.ubuntu.com/4272-1/
debian	www.debian.org/security/2020/dsa-4631
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3DUMIBUYGJRAVJCTFUWBRLVQKOUTVX5P/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Jan 2020 22:15Current

8.4High risk

Vulners AI Score8.4

CVSS25.0

CVSS37.5

EPSS0.002

CWE-190