Lucene search
+L

147 matches found

OSV
OSV
added 2021/07/13 5:15 p.m.3 views

ALPINE-CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

9.8CVSS9AI score0.03162EPSS
Exploits0References1
OSV
OSV
added 2021/07/13 5:15 p.m.1 views

DEBIAN-CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

9.8CVSS7.3AI score0.03162EPSS
Exploits0References1
OSV
OSV
added 2021/07/13 5:15 p.m.36 views

CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

9.8CVSS5.7AI score
Exploits0References6
PyPA
PyPA
added 2021/07/13 5:15 p.m.6 views

PYSEC-2021-331

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

9.8CVSS7.4AI score0.03162EPSS
Exploits0References6Affected Software1
Prion
Prion
added 2021/07/13 5:15 p.m.29 views

Buffer overflow

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

7.5CVSS9.4AI score0.03162EPSS
Exploits0References6Affected Software3
OSV
OSV
added 2021/07/13 5:15 p.m.3 views

UBUNTU-CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

9.8CVSS7.1AI score0.03162EPSS
Exploits0References6
CVE
CVE
added 2021/07/13 12:0 a.m.383 views

CVE-2021-34552

Pillow (Python Imaging Library) vulnerability CVE-2021-34552: Buffer overflow in Convert.c when passing controlled parameters to convert(), affecting Pillow <= 8.2.0 and PIL

9.8CVSS9.6AI score0.03162EPSS
Exploits0References6Affected Software1
AlpineLinux
AlpineLinux
added 2021/07/13 12:0 a.m.63 views

CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

9.8CVSS9.9AI score0.03162EPSS
Exploits0
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2014:0705-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.4CVSS8.8AI score0.00492EPSS
Exploits2References2
CNVD
CNVD
added 2021/06/03 12:0 a.m.19 views

Pillow Out-of-Bounds Read Vulnerability (CNVD-2021-43528)

Python Imaging Library PIL is a free library for the Python programming language that supports opening, manipulating, and saving a wide range of image file formats.Pillow is a PIL branch. An out-of-bounds read vulnerability exists in the j2kugrayala function in J2kDecode in versions of Pillow pri...

9.1CVSS6.5AI score0.02876EPSS
Exploits0References1
CNVD
CNVD
added 2021/06/03 12:0 a.m.18 views

Pillow Out-of-Bounds Read Vulnerability (CNVD-2021-43529)

Python Imaging Library PIL is a free library for the Python programming language that supports opening, manipulating, and saving a wide range of image file formats.Pillow is a PIL branch. An out-of-bounds read vulnerability exists in the j2kugrayi function in J2kDecode in versions of Pillow prior...

9.1CVSS6.5AI score0.02342EPSS
Exploits0References1
CNVD
CNVD
added 2021/03/04 12:0 a.m.13 views

Pillow Denial of Service Vulnerability (CNVD-2021-14763)

Python Imaging Library PIL is a free library for the Python programming language that supports opening, manipulating, and saving a wide range of image file formats.Pillow is a PIL branch. A denial of service vulnerability exists in Pillow versions prior to 8.1.1. The vulnerability stems from not...

7.5CVSS6.5AI score0.04851EPSS
Exploits0References1
CNVD
CNVD
added 2021/03/04 12:0 a.m.12 views

Pillow Denial of Service Vulnerability (CNVD-2021-14762)

Python Imaging Library PIL is a free library for the Python programming language that supports opening, manipulating, and saving a wide range of image file formats.Pillow is a PIL branch. A denial of service vulnerability exists in Pillow versions prior to 8.1.1. The vulnerability stems from not...

7.5CVSS6.5AI score0.0317EPSS
Exploits0References1
Gentoo Linux
Gentoo Linux
added 2021/01/11 12:0 a.m.65 views

Pillow: Multiple vulnerabilities

Background Python Imaging Library fork Description Multiple vulnerabilities have been discovered in Pillow. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at this time...

8.8CVSS3.6AI score0.01789EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/09/07 12:0 a.m.33 views

NewStart CGSL MAIN 4.05 : python-imaging Vulnerability (NS-SA-2020-0045)

The remote NewStart CGSL host, running version MAIN 4.05, has python-imaging packages installed that are affected by a vulnerability: - libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. CVE-2020-5312 Note that Nessus has not tested for this issue but has instead reli...

9.8CVSS6.8AI score0.0369EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/03/26 12:0 a.m.33 views

CentOS 6 : python-imaging (RHSA-2020:0898)

The remote CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0898 advisory. - libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. CVE-2020-5312 Note that Nessus has not tested for this issue but has instead...

9.8CVSS6.8AI score0.0369EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/03/26 12:0 a.m.27 views

CentOS: Security Advisory for python-imaging (CESA-2020:0898)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.7AI score0.0369EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/03/23 12:0 a.m.32 views

RHEL 6 : python-imaging (RHSA-2020:0898)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0898 advisory. The Python Imaging Library PIL adds image processing capabilities to your Python interpreter. This library provides extensive file format support, an...

9.8CVSS6.7AI score0.0369EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2020/03/20 12:0 a.m.29 views

Oracle Linux 6 : python-imaging (ELSA-2020-0898)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0898 advisory. 1.1.6-20 - Fixes for CVE-2020-5312 and related part of CVE-2019-16865 Resolves: rhbz1789533 Tenable has extracted the preceding description block directly from...

9.8CVSS6.4AI score0.0369EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/03/19 12:0 a.m.52 views

Scientific Linux Security Update : python-imaging on SL6.x i386/x86_64 (20200318)

Security Fixes : - python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c CVE-2020-5312 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid134694; scriptversion"1.3";...

9.8CVSS6.5AI score0.0369EPSS
Exploits0References2
Rows per page
Query Builder