Lucene search
+L

1118 matches found

Github Security Blog
Github Security Blog
added 2020/07/27 9:52 p.m.56 views

Out-of-bounds read in Pillow

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

8.1CVSS3.6AI score0.02514EPSS
SaveExploits0References14Affected Software1
OSV
OSV
added 2020/07/27 9:52 p.m.36 views

GHSA-43FQ-W8QQ-V88H Out-of-bounds read in Pillow

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

9.2CVSS7.5AI score0.02514EPSS
SaveExploits0References15
RedhatCVE
RedhatCVE
added 2020/07/01 11:20 a.m.40 views

CVE-2020-11538

An out-of-bounds read/write flaw was found in python-pillow, in the way SGI RLE images are decoded. An application that uses python-pillow to decode untrusted images may be vulnerable. This flaw allows an attacker to crash the application or potentially execute code on the system. The highest...

6.8CVSS8AI score0.02514EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/06/28 12:00 a.m.15 views

Pillow Out-of-Bounds Read Vulnerability

Pillow is a Python based image processing library. An out-of-bounds read vulnerability exists in the processing of SGI image files in the libImaging/SgiRleDecode.c file in Pillow 7.0.0 and earlier versions. No detailed vulnerability details are provided at this time...

8.1CVSS7.9AI score0.02514EPSS
SaveExploits0References1
Veracode
Veracode
added 2020/06/26 3:28 a.m.30 views

Denial Of Service (DoS)

pillow is vulnerable to denial of service. An out-of-bounds read occurs when parsing SGI image files. An attacker is able to crash the application by submitting a malicious SGI image...

8.1CVSS4.4AI score0.02514EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2020/06/25 7:15 p.m.30 views

CVE-2020-11538

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

8.1CVSS9.4AI score
SaveExploits0References8
OSV
OSV
added 2020/06/25 7:15 p.m.3 views

DEBIAN-CVE-2020-11538

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

8.1CVSS6.2AI score0.02514EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/25 7:15 p.m.26 views

CVE-2020-11538

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

8.1CVSS0.02514EPSS
SaveExploits0References8
OSV
OSV
added 2020/06/25 7:15 p.m.37 views

PYSEC-2020-80

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

8.1CVSS3.5AI score0.02514EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2020/06/25 7:15 p.m.49 views

CVE-2020-11538

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

8.1CVSS6.8AI score0.02514EPSS
SaveExploits0References6
PyPA
PyPA
added 2020/06/25 7:15 p.m.13 views

PYSEC-2020-80

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

9.8CVSS7AI score0.04212EPSS
SaveExploits0References9Affected Software1
Prion
Prion
added 2020/06/25 7:15 p.m.29 views

Out-of-bounds

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

6.8CVSS8.6AI score0.04212EPSS
SaveExploits0References8Affected Software3
Debian CVE
Debian CVE
added 2020/06/25 6:32 p.m.45 views

CVE-2020-11538

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

8.1CVSS6.9AI score0.02514EPSS
SaveExploits0
Veracode
Veracode
added 2020/04/10 12:53 a.m.34 views

Arbitrary Code Execution

python is vulnerable to arbitrary code execution. The vulnerability exists if an application written in Python was using the rgbimg module and loaded a specially-crafted SGI image file, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user...

5CVSS3.8AI score0.04421EPSS
SaveExploits0References17Affected Software1
Veracode
Veracode
added 2020/04/10 12:53 a.m.35 views

Arbitrary Code Execution

python is vulnerable to arbitrary code execution. The vulnerability exists as multiple flaws were found in the Python rgbimg module. If an application written in Python was using the rgbimg module and loaded a specially-crafted SGI image file, it could cause the application to crash or, possibly,...

7.5CVSS3.5AI score0.04877EPSS
SaveExploits0References17Affected Software1
Veracode
Veracode
added 2020/04/10 12:53 a.m.37 views

Arbitrary Code Execution

python is vulnerable to arbitrary code execution. The vulnerability exists if an application written in Python was using the rgbimg module and loaded a specially-crafted SGI image file, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user...

7.5CVSS3.8AI score0.04877EPSS
SaveExploits0References17Affected Software1
Veracode
Veracode
added 2020/04/10 12:35 a.m.35 views

Arbitrary Code Execution

cups is vulnerable to arbitrary code execution. A buffer overflow flaw was discovered in the SGI image format decoding routines used by the CUPS image converting filter "imagetops". An attacker could create a malicious SGI image file that could, possibly, execute arbitrary code as the "lp" user i...

7.5CVSS3.4AI score0.04403EPSS
SaveExploits0References30Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/02/24 12:00 a.m.38 views

Debian DSA-4631-1 : pillow - security update

Multiple security issues were discovered in Pillow, a Python imaging library, which could result in denial of service and potentially the execution of arbitrary code if malformed PCX, FLI, SGI or TIFF images are processed. C Tenable Network Security, Inc. The descriptive text and package checks i...

9.8CVSS6.6AI score0.04212EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2020/02/20 10:18 p.m.10 views

python-pillow: out-of-bounds write in expandrow in libImaging/SgiRleDecode.c

An out-of-bounds write flaw was discovered in python-pillow in the way SGI RLE images are decoded. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the application or potentially execute code on the system...

9.8CVSS7.2AI score0.04212EPSS
SaveExploits0References4
Mageia
Mageia
added 2020/02/18 2:05 p.m.51 views

Updated python-pillow packages fix security vulnerabilities

Updated python-pillow packages fix security vulnerabilities: It was discovered that Pillow incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service CVE-2019-16865, CVE-2019-19911. It was discovered that Pillow incorrectly handled certain TIFF...

9.8CVSS2.8AI score0.04212EPSS
SaveExploits0References2
Rows per page
Query Builder