Lucene search
+L

1085 matches found

OSV
OSV
added 2021/01/12 9:15 a.m.7 views

ALPINE-CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

5.4CVSS8.8AI score0.01573EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/12 9:15 a.m.30 views

CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

5.8CVSS7AI score0.01573EPSS
SaveExploits0References3
OSV
OSV
added 2021/01/12 9:15 a.m.46 views

PYSEC-2021-71

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

5.8CVSS2.2AI score0.01573EPSS
SaveExploits0References4
PyPA
PyPA
added 2021/01/12 9:15 a.m.7 views

PYSEC-2021-71

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

5.8CVSS7.2AI score0.01573EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2021/01/12 9:15 a.m.40 views

CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

5.8CVSS6.7AI score0.01573EPSS
SaveExploits0References3
Prion
Prion
added 2021/01/12 9:15 a.m.27 views

Buffer overflow

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

5.8CVSS6.8AI score0.01573EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2021/01/12 9:15 a.m.1 views

UBUNTU-CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

5.4CVSS6.4AI score0.01573EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/01/12 8:8 a.m.21 views

CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

7.2AI score0.01573EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2021/01/12 8:8 a.m.43 views

CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

5.8CVSS7.5AI score0.01573EPSS
SaveExploits0
CVE
CVE
added 2021/01/12 8:8 a.m.259 views

CVE-2020-35655

Pillow (before 8.1.0) contains a vulnerability in SGIRleDecode: a 4‑byte buffer over-read while decoding crafted SGI RLE images caused by mishandled offsets and length tables.

5.8CVSS6.8AI score0.01573EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2021/01/12 8:8 a.m.33 views

CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

5.8CVSS5.7AI score0.01573EPSS
SaveExploits0
CNVD
CNVD
added 2021/01/12 12:0 a.m.5 views

Gentoo Linux Buffer Overflow Vulnerability

Gentoo is an open source Linux system from the Gentoo Foundation. Gentoo Linux prior to version 8.1.0 suffers from a buffer overflow vulnerability that stems from improper handling of system offsets and length tables, where SGIRleDecode has a 4-byte buffer overflow when decoding a carefully craft...

5.8CVSS9.6AI score0.01573EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/12 12:0 a.m.31 views

SAP 3D Visual Enterprise Viewer SGI File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01199EPSS
SaveExploits0
Mageia
Mageia
added 2020/11/23 7:51 p.m.48 views

Updated python-pillow packages fix security vulnerabilities

Pillow before 6.2.3 and 7.x before 7.0.1 has multiple out-of-bounds reads in libImaging/FliDecode.c CVE-2020-10177. In libImaging/PcxDecode.c in Pillow before 6.2.3 and 7.x before 7.0.1, an out-of-bounds read can occur when reading PCX files where state-shuffle is instructed to read beyond...

8.1CVSS2.4AI score0.02514EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/09/29 12:0 a.m.25 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-2024)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9AI score0.04212EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/29 12:0 a.m.32 views

EulerOS Virtualization for ARM 64 3.0.6.0 : python-pillow (EulerOS-SA-2020-2024)

According to the versions of the python-pillow package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.CVE-2020-5311 - In...

9.8CVSS6.7AI score0.04212EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2020/08/31 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-1877)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9AI score0.04212EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/08/28 12:0 a.m.43 views

EulerOS 2.0 SP8 : python-pillow (EulerOS-SA-2020-1877)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integ...

9.8CVSS6.7AI score0.04212EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/08/04 10:29 a.m.54 views

Important: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

8.1CVSS6.6AI score0.02514EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2020/08/04 7:40 a.m.54 views

Important: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

8.1CVSS6.6AI score0.02514EPSS
SaveExploits0References2
Rows per page
Query Builder