Lucene search
+L

20 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•12 views

Astra Linux – Vulnerability in libsdl1.2, libsdl2

In SDLGetRGB in the video/SDLpixels.c file, there is a heap-based buffer over-read issue in versions from 1.2.15 up to 2.x, and from 2.0.9 onwards...

8.1CVSS6.7AI score0.02866EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2021-0170

Malware in sbrugna...

7.5CVSS6.8AI score0.0318EPSS
SaveExploits1References19
SUSE CVE
SUSE CVE
•added 2023/02/15 3:45 a.m.•10 views

SUSE CVE-2021-23437

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

7.5CVSS7AI score0.0318EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2022/02/23 12:00 a.m.•29 views

EulerOS 2.0 SP3 : python-pillow (EulerOS-SA-2022-1184)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

7.5CVSS7AI score0.0318EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/11/11 12:00 a.m.•48 views

EulerOS 2.0 SP5 : python-pillow (EulerOS-SA-2021-2670)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

7.5CVSS7AI score0.0318EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/11/11 12:00 a.m.•47 views

EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2021-2694)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

7.5CVSS7AI score0.0318EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/11/03 12:00 a.m.•17 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2641)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.7AI score0.0318EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/11/02 12:00 a.m.•44 views

EulerOS 2.0 SP8 : python-pillow (EulerOS-SA-2021-2641)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

7.5CVSS7AI score0.0318EPSS
SaveExploits1References2
Veracode
Veracode
•added 2021/10/25 11:18 p.m.•32 views

Regular Expression Denial Of Service (ReDoS)

py3-pillow is vulnerable to regular expression denial of service. An attacker is able to crash the system through the getrgb function...

7.5CVSS3.8AI score0.0318EPSS
SaveExploits1References9Affected Software2
OSV
OSV
•added 2021/10/15 11:04 a.m.•11 views

OESA-2021-1383 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. Security Fixes: The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of...

7.5CVSS7.3AI score0.0318EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2021/09/07 11:08 p.m.•66 views

Uncontrolled Resource Consumption in pillow

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

7.5CVSS7.5AI score0.0318EPSS
SaveExploits1References12Affected Software1
OSV
OSV
•added 2021/09/07 11:08 p.m.•15 views

GHSA-98VV-PW6R-Q6Q4 Uncontrolled Resource Consumption in pillow

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

8.7CVSS6.6AI score0.0318EPSS
SaveExploits1References13
NVD
NVD
•added 2021/09/03 4:15 p.m.•25 views

CVE-2021-23437

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

7.5CVSS0.0318EPSS
SaveExploits1References7
OSV
OSV
•added 2021/09/03 4:15 p.m.•10 views

ALPINE-CVE-2021-23437

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

7.5CVSS8.6AI score0.0318EPSS
SaveExploits1References1
PyPA
PyPA
•added 2021/09/03 4:15 p.m.•15 views

PYSEC-2021-317

The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

7.5CVSS7AI score0.0318EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2021/09/03 4:15 p.m.•18 views

PYSEC-2021-317

The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

7.5CVSS6.8AI score0.0318EPSS
SaveExploits1References4
Prion
Prion
•added 2021/09/03 4:15 p.m.•30 views

Design/Logic Flaw

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

5CVSS7.3AI score0.0318EPSS
SaveExploits1References6Affected Software2
Cvelist
Cvelist
•added 2021/09/03 4:10 p.m.•36 views

CVE-2021-23437 Regular Expression Denial of Service (ReDoS)

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

7.5CVSS7.7AI score0.0318EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2021/09/03 12:00 a.m.•15 views

PT-2021-6817

Name of the Vulnerable Software and Affected Versions Pillow versions 5.2.0 through 8.3.2 Pillow versions prior to 8.3.2 Description The issue is related to a Regular Expression Denial of Service ReDoS via the getrgb function, which can lead to uncontrolled resource consumption. This allows a...

8.7CVSS6.7AI score0.0318EPSS
SaveExploits1References100
Snyk
Snyk
•added 2021/07/15 3:20 p.m.•4 views

Regular Expression Denial of Service (ReDoS)

Overview Pillow is a PIL Python Imaging Library fork. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its original and...

7.5CVSS6.7AI score0.0318EPSS
SaveExploits1References2
Rows per page
Query Builder