Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-CFMR-38G9-F2H7
HistoryMay 14, 2022 - 2:05 a.m.

Pillow denial of service via Crafted Block Size

2022-05-1402:05:20
Google
osv.dev
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.7%

JSON

PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.

CPENameOperatorVersion
pilloweq1.5
pilloweq1.7.2
pilloweq1.7.7
pilloweq1.1
pilloweq1.7.6
pilloweq1.7.4
pilloweq2.2.1
pilloweq2.3.1
pilloweq1.7.1
pilloweq1.7.0
Rows per page:
1-10 of 251

Related

openvas 16
debian 2
github 1
nessus 16
prion 1
ubuntucve 1
mageia 1
osv 2
cve 1
securityvulns 4
debiancve 1
cvelist 1
fedora 4
ubuntu 3
openvas
openvas
Debian Security Advisory DSA 3009-1 (python-imaging - security update)
2014-08-21 00:00:00
Debian: Security Advisory (DSA-3009-1)
2014-08-20 00:00:00
Debian: Security Advisory (DLA-41-1)
2023-03-08 00:00:00
debian
debian
[SECURITY] [DSA 3009-1] python-imaging security update
2014-08-21 18:09:52
[DLA 41-1] python-imaging security update
2014-08-24 16:46:55
github
github
Pillow denial of service via Crafted Block Size
2022-05-14 02:05:20
nessus
nessus
Oracle Solaris Third-Party Patch Update : py_pil (cve_2014_3589_input_validation)
2015-01-19 00:00:00
Fedora 20 : python-pillow-2.2.1-5.fc20 (2014-9540)
2014-08-27 00:00:00
Mandriva Linux Security Advisory : python-imaging (MDVSA-2014:163)
2014-09-12 00:00:00
prion
prion
Code injection
2014-08-25 14:55:00
ubuntucve
ubuntucve
CVE-2014-3589
2014-08-25 00:00:00
mageia
mageia
Updated python-imaging & python-pillow packages fix CVE-2014-3589
2014-08-21 13:36:13
osv
osv
python-imaging - security update
2014-08-21 00:00:00
PYSEC-2014-10
2014-08-25 14:55:00
cve
cve
CVE-2014-3589
2014-08-25 14:55:00
securityvulns
securityvulns
Python Imaging Library DoS
2014-08-26 00:00:00
[SECURITY] [DSA 3009-1] python-imaging security update
2014-08-26 00:00:00
pillow multiple security vulnerabilities
2015-04-19 00:00:00
debiancve
debiancve
CVE-2014-3589
2014-08-25 14:55:00
cvelist
cvelist
CVE-2014-3589
2014-08-25 14:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: python-pillow-2.2.1-5.fc20
2014-08-27 01:32:03
[SECURITY] Fedora 19 Update: python-pillow-2.0.0-14.gitd1c6db8.fc19
2014-08-27 01:29:32
[SECURITY] Fedora 20 Update: python-pillow-2.2.1-7.fc20
2014-11-22 12:39:31
ubuntu
ubuntu
Python Imaging Library vulnerabilities
2016-09-15 00:00:00
Pillow regresssion
2016-09-30 00:00:00
Pillow vulnerabilities
2016-09-27 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.7%

JSON
Related for OSV:GHSA-CFMR-38G9-F2H7
openvas16debian2github1nessus16prion1ubuntucve1mageia1osv2cve1securityvulns4debiancve1cvelist1fedora4ubuntu3