Lucene search
+L

412 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/16 12:00 a.m.•1 views

CVE-2023-0475: Improper Handling of Highly Compressed Data (Data Amplification)

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0...

6.5CVSS5.6AI score0.00454EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 3:22 a.m.•8 views

SUSE CVE-2022-45198

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...

5.3CVSS6.3AI score0.01296EPSS
SaveExploits0References5
Ivanti
Ivanti
•added 2023/02/14 7:22 a.m.•13 views

JSA10350 - Optimistic TCP acknowledgements can cause denial of service (CERT/CC VU#102014)

Last Modified Date Aug 24, 2026 12:35:35 AM...

5.8AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2023/02/10 12:00 a.m.•17 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1397)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01296EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/02/10 12:00 a.m.•29 views

EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2023-1397)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 - Pillow before 9.3.0...

7.5CVSS7AI score0.01296EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2023/01/09 12:00 a.m.•24 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1134)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01296EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/01/09 12:00 a.m.•22 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1110)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01296EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/01/06 12:00 a.m.•34 views

EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2023-1134)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 Note that Tenable Network...

7.5CVSS6.8AI score0.01296EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/01/06 12:00 a.m.•30 views

EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2023-1110)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 Note that Tenable Network...

7.5CVSS6.8AI score0.01296EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/12/13 12:00 a.m.•50 views

Ubuntu 20.04 LTS / 22.04 LTS : Pillow vulnerabilities (USN-5777-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5777-1 advisory. It was discovered that Pillow incorrectly handled the deletion of temporary files when using a temporary directory that contains spaces. An...

9.1CVSS7.8AI score0.02691EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/11/14 12:00 p.m.•43 views

Pillow vulnerable to Data Amplification attack.

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...

7.5CVSS7.5AI score0.01296EPSS
SaveExploits0References10Affected Software1
OSV
OSV
•added 2022/11/14 12:00 p.m.•35 views

GHSA-M2VV-5VJ5-2HM7 Pillow vulnerable to Data Amplification attack.

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...

8.7CVSS7.5AI score0.01296EPSS
SaveExploits0References10
NVD
NVD
•added 2022/11/14 7:15 a.m.•17 views

CVE-2022-45198

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...

7.5CVSS0.01296EPSS
SaveExploits0References6
OSV
OSV
•added 2022/11/14 7:15 a.m.•4 views

DEBIAN-CVE-2022-45198

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...

7.5CVSS6.7AI score0.01296EPSS
SaveExploits0References1
Prion
Prion
•added 2022/11/14 7:15 a.m.•28 views

Design/Logic Flaw

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...

5CVSS7.4AI score0.01296EPSS
SaveExploits0References6Affected Software1
attackerkb
attackerkb
•added 2022/11/14 7:15 a.m.•8 views

CVE-2022-45198

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...

7.5CVSS6.8AI score0.01296EPSS
SaveExploits0References7
OSV
OSV
•added 2022/11/14 7:15 a.m.•11 views

UBUNTU-CVE-2022-45198

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...

7.5CVSS6.8AI score0.01296EPSS
SaveExploits0References5
OSV
OSV
•added 2022/11/14 7:15 a.m.•55 views

PYSEC-2022-42979

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...

7.5CVSS2.5AI score0.01296EPSS
SaveExploits0References6
PyPA
PyPA
•added 2022/11/14 7:15 a.m.•14 views

PYSEC-2022-42979

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...

7.5CVSS7AI score0.01296EPSS
SaveExploits0References6Affected Software1
CVE
CVE
•added 2022/11/14 12:00 a.m.•148 views

CVE-2022-45198

CVE-2022-45198 affects Pillow up to version 9.2.0, where improper handling of highly compressed GIF data (Data Amplification) can cause abnormal resource usage. Public sources confirm Pillow prior to 9.2.0 is vulnerable; advisories reference upgrades to mitigate. Debian LTS notes Pillow updates (...

7.5CVSS7.4AI score0.01296EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder