Lucene search
+L

6819 matches found

Github Security Blog
Github Security Blog
added 2021/11/03 6:04 p.m.41 views

Integer overflow in Pillow

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

8.8CVSS8.9AI score0.01975EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2021/11/03 6:04 p.m.8 views

GHSA-VCQG-3P29-XW73 Integer overflow in Pillow

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

9.3CVSS6.8AI score0.01975EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2021/11/01 12:00 a.m.16 views

Debian: Security Advisory (DSA-4997-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.01456EPSS
SaveExploits0References4
Debian
Debian
added 2021/10/31 2:57 p.m.84 views

[SECURITY] [DSA 4997-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4997-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 31, 2021 https://www.debian.org/security/faq -...

4.3CVSS7.1AI score0.01456EPSS
SaveExploits0
Debian
Debian
added 2021/10/31 2:57 p.m.101 views

[SECURITY] [DSA 4997-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4997-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 31, 2021 https://www.debian.org/security/faq -...

6.5CVSS6.9AI score0.01456EPSS
SaveExploits0
OSV
OSV
added 2021/10/31 12:00 a.m.23 views

DSA-4997-1 tiff - security update

Bulletin has no description...

6.5CVSS6.4AI score0.01456EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.13 views

The vulnerability of the TiffDecode.c component in the Pillow image processing library, related to out-of-buffer writing, allows a hacker to cause a service failure.

The vulnerability of the TiffDecode.c component in the Pillow image processing library is related to the lack of memory checks during reading operations. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.5CVSS6.8AI score0.02372EPSS
SaveExploits0References10Affected Software4
Tenable Nessus
Tenable Nessus
added 2021/10/12 12:00 a.m.31 views

openSUSE 15 Security Update : mupdf (openSUSE-SU-2021:1341-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1341-1 advisory. - A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a...

7.8CVSS6.9AI score0.01048EPSS
SaveExploits1References7
OSV
OSV
added 2021/10/11 2:52 p.m.5 views

OPENSUSE-SU-2021:1341-1 Security update for mupdf

This update for mupdf fixes the following issues: - CVE-2020-19609: Fixed heap-based buffer overflow in tiffexpandcolormap when parsing TIFF files boo1190176 - CVE-2020-16600: Fixed use-after-free when a valid page was followed by a page with invalid pixmap dimensions boo1190175...

7.8CVSS6.3AI score0.01048EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2021/10/10 12:00 a.m.39 views

Debian: Security Advisory (DLA-2777-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.02433EPSS
SaveExploits2References4
Debian
Debian
added 2021/10/09 6:02 p.m.98 views

[SECURITY] [DLA 2777-1] tiff security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2777-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta October 03, 2021 https://wiki.debian.org/LTS -...

7.5CVSS7.9AI score0.02433EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/10/03 12:00 a.m.74 views

Debian DLA-2777-1 : tiff - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2777 advisory. Two security issues were found in TIFF, a widely used format for storing image data, as follows: CVE-2020-19131 Buffer Overflow in LibTiff allows attackers to caus...

7.5CVSS6.8AI score0.02433EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2021/10/03 12:00 a.m.7 views

PT-2023-4821 · Libtiff +1 · Libtiff +1

Name of the Vulnerable Software and Affected Versions: libtiff version 4.0.10 Description: The issue is related to a heap buffer overflow in the TIFFmemcpy function in tif unix.c of the libtiff library. This allows an attacker to cause a denial-of-service through a crafted tiff file. The...

7.5CVSS6.7AI score0.02433EPSS
SaveExploits6References80
OSV
OSV
added 2021/10/03 12:00 a.m.36 views

DLA-2777-1 tiff - security update

Bulletin has no description...

7.5CVSS6.6AI score0.02433EPSS
SaveExploits2
OSV
OSV
added 2021/09/27 4:15 p.m.10 views

CVE-2021-40700

Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this...

7.8CVSS6.3AI score0.01658EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/27 4:15 p.m.17 views

CVE-2021-40700

Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this...

9.3CVSS0.01658EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/27 4:15 p.m.10 views

CVE-2021-39818

Adobe InCopy version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS6.3AI score0.01714EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/27 4:15 p.m.22 views

CVE-2021-39818

Adobe InCopy version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS0.01714EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/09/27 4:15 p.m.8 views

CVE-2021-40700

Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this...

9.3CVSS7.7AI score0.01658EPSS
SaveExploits0References2
Prion
Prion
added 2021/09/27 4:15 p.m.17 views

Memory corruption

Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this...

9.3CVSS7.9AI score0.01658EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder