Lucene search
+L

215 matches found

AlpineLinux
AlpineLinux
•added 2020/01/03 12:52 a.m.•65 views

CVE-2020-5313

libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow...

7.1CVSS8.5AI score0.02752EPSS
SaveExploits0
CVE
CVE
•added 2020/01/03 12:52 a.m.•378 views

CVE-2020-5313

Pillow (libImaging/FliDecode.c) has an FLI buffer overflow in versions before 6.2.2. Affected: Pillow/Python imaging library; root cause is an FLI decode buffer overflow. Impact is described as overflow in loading FLI images. Remediation: upgrade to Pillow 6.2.2 or later (per the CVE entry and ve...

7.1CVSS8.1AI score0.02752EPSS
SaveExploits0References6Affected Software1
CNVD
CNVD
•added 2020/01/03 12:00 a.m.•6 views

Pillow FLI Buffer Overflow Vulnerability

Pillow is a Python based image processing library. A buffer overflow vulnerability exists in the libImaging/FliDecode.c file in Pillow versions prior to 6.2.2. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries,...

7.1CVSS8AI score0.02752EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/03 12:00 a.m.•1 views

CVE-2020-5313: Out-of-bounds Read

libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow...

7.1CVSS7.5AI score0.02752EPSS
SaveExploits0References2
FreeBSD
FreeBSD
•added 2019/12/19 12:00 a.m.•38 views

Pillow -- Multiple vulnerabilities

Pillow developers report: This release addresses several security problems, as well as addressing CVE-2019-19911. CVE-2019-19911 is regarding FPX images. If an image reports that it has a large number of bands, a large amount of resources will be used when trying to process the image. This is fix...

9.8CVSS1.9AI score0.04212EPSS
SaveExploits0References1
Veracode
Veracode
•added 2019/05/02 5:51 a.m.•37 views

Denial Of Service (DoS) And Remote Code Execution (RCE)

GStreamer is vulnerable to denial of service DoS and remote code execution RCE attacks. GStreamer's FLC/FLI/FLX media file format decoding plug-in is the flawed component. A remote attacker could crash or, potentially, execute arbitrary code with the privileges of the user running the application...

9.8CVSS9.5AI score0.08911EPSS
SaveExploits1References13Affected Software1
Veracode
Veracode
•added 2019/05/02 5:51 a.m.•33 views

Denial Of Service (DoS) And Remote Code Execution (RCE)

GStreamer is vulnerable to denial of service DoS and remote code execution RCE attacks. GStreamer's FLC/FLI/FLX media file format decoding plug-in is the flawed component. A remote attacker could crash or, potentially, execute arbitrary code with the privileges of the user running the application...

9.8CVSS9.5AI score0.09267EPSS
SaveExploits1References13Affected Software1
Github Security Blog
Github Security Blog
•added 2018/07/24 8:15 p.m.•47 views

Pillow Buffer overflow in ImagingFliDecode

Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service crash via a crafted FLI file...

6.5CVSS6.5AI score0.0252EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2018/07/24 8:15 p.m.•26 views

GHSA-8XJV-V9XQ-M5H9 Pillow Buffer overflow in ImagingFliDecode

Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service crash via a crafted FLI file...

7.1CVSS6AI score0.0252EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2017/01/10 12:00 a.m.•56 views

CentOS 7 : gstreamer-plugins-good (CESA-2017:0019)

An update for gstreamer-plugins-good is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS7.2AI score0.09267EPSS
SaveExploits4References6
Tenable Nessus
Tenable Nessus
•added 2017/01/06 12:00 a.m.•55 views

Scientific Linux Security Update : gstreamer-plugins-good on SL7.x x86_64 (20170105)

Security Fixes : - Multiple flaws were discovered in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use these flaws to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application...

9.8CVSS7.5AI score0.09267EPSS
SaveExploits4References6
Tenable Nessus
Tenable Nessus
•added 2017/01/06 12:00 a.m.•49 views

Scientific Linux Security Update : gstreamer1-plugins-good on SL7.x x86_64 (20170105)

Security Fixes : - Multiple flaws were discovered in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use these flaws to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application...

9.8CVSS7.5AI score0.09267EPSS
SaveExploits4References6
RedHat Linux
RedHat Linux
•added 2017/01/05 10:05 a.m.•25 views

gstreamer-plugins-good: Invalid memory read in flx_decode_chunks

An invalid memory read access flaw was found in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash...

5.5CVSS7.4AI score0.02597EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2017/01/05 9:35 a.m.•15 views

gstreamer-plugins-good: Invalid memory read in flx_decode_chunks

An invalid memory read access flaw was found in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash...

5.5CVSS7.4AI score0.02597EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2017/01/05 9:35 a.m.•68 views

Moderate: Red Hat Security Advisory: gstreamer-plugins-good security update

An update for gstreamer-plugins-good is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS7.2AI score0.09267EPSS
SaveExploits4References3
Tenable Nessus
Tenable Nessus
•added 2017/01/05 12:00 a.m.•67 views

RHEL 7 : gstreamer1-plugins-good (RHSA-2017:0020)

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS7.2AI score0.09267EPSS
SaveExploits4References11
OpenVAS
OpenVAS
•added 2016/12/22 12:00 a.m.•54 views

RedHat Update for gstreamer-plugins-good RHSA-2016:2975-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.09267EPSS
SaveExploits4References2
Cent OS
Cent OS
•added 2016/12/21 5:41 p.m.•85 views

gstreamer security update

CentOS Errata and Security Advisory CESA-2016:2975 An update for gstreamer-plugins-good is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

9.8CVSS7.2AI score0.09267EPSS
SaveExploits4References7
RedHat Linux
RedHat Linux
•added 2016/12/21 12:33 p.m.•14 views

gstreamer-plugins-good: Heap buffer overflow in FLIC decoder

Multiple flaws were discovered in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use these flaws to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application...

9.8CVSS7.8AI score0.08911EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2016/12/21 12:33 p.m.•21 views

gstreamer-plugins-good: Invalid memory read in flx_decode_chunks

An invalid memory read access flaw was found in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash...

5.5CVSS7.4AI score0.02597EPSS
SaveExploits0References4
Rows per page
Query Builder