Lucene search
+L

91 matches found

OpenVAS
OpenVAS
•added 2021/06/29 12:00 a.m.•18 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-1986)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.7AI score0.02372EPSS
SaveExploits0References2
OSV
OSV
•added 2021/06/10 8:49 a.m.•9 views

SUSE-SU-2021:1939-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues: - CVE-2021-25292: Fixed a backtracking regex in PDF parser could be used as a DOS attack bsc1183101. - CVE-2021-25290: Fixed a negative-offset memcpy with an invalid size in TiffDecode.c bsc1183105. - CVE-2021-27922,CVE-2021-27923: Fixed...

9.1CVSS6.8AI score0.04851EPSS
SaveExploits0References21
OpenVAS
OpenVAS
•added 2021/06/07 12:00 a.m.•15 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-1972)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.7AI score0.02372EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/06/04 12:00 a.m.•26 views

EulerOS Virtualization 2.9.1 : python-pillow (EulerOS-SA-2021-1966)

According to the version of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid...

7.5CVSS6.9AI score0.02372EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/04/30 12:00 a.m.•46 views

EulerOS 2.0 SP3 : python-pillow (EulerOS-SA-2021-1840)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size.CVE-2021-25290 - I...

7.5CVSS7AI score0.02372EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2021/03/29 4:35 p.m.•52 views

Out-of-bounds Write in Pillow

An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size...

7.5CVSS2.4AI score0.02372EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2021/03/29 4:35 p.m.•21 views

GHSA-57H3-9RGR-C24M Out of bounds write in Pillow

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

9.8CVSS7.1AI score0.02345EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2021/03/29 4:35 p.m.•60 views

Out of bounds write in Pillow

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

9.8CVSS2.9AI score0.02345EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2021/03/19 4:15 a.m.•11 views

ALPINE-CVE-2021-25289

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

9.8CVSS9.1AI score0.02345EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/19 4:15 a.m.•31 views

CVE-2021-25289

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

9.8CVSS9.3AI score
SaveExploits0References2
OSV
OSV
•added 2021/03/19 4:15 a.m.•7 views

DEBIAN-CVE-2021-25289

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

9.8CVSS7.2AI score0.02345EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/19 4:15 a.m.•5 views

DEBIAN-CVE-2021-25290

An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size...

7.5CVSS6.9AI score0.02372EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/19 4:15 a.m.•23 views

CVE-2021-25289

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

9.8CVSS0.02345EPSS
SaveExploits0References2
OSV
OSV
•added 2021/03/19 4:15 a.m.•30 views

CVE-2021-25291

An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries...

7.5CVSS7.4AI score
SaveExploits0References2
Prion
Prion
•added 2021/03/19 4:15 a.m.•27 views

Out-of-bounds

An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries...

5CVSS8.2AI score0.01398EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/03/19 4:15 a.m.•12 views

PYSEC-2021-36

An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size...

7.5CVSS6.9AI score0.02372EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/03/19 4:15 a.m.•11 views

CVE-2021-25290

An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size...

7.5CVSS6.9AI score0.02372EPSS
SaveExploits0References4
OSV
OSV
•added 2021/03/19 4:15 a.m.•15 views

PYSEC-2021-35

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

9.8CVSS7.1AI score0.02345EPSS
SaveExploits0References2
Prion
Prion
•added 2021/03/19 4:15 a.m.•43 views

Heap overflow

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

7.5CVSS9.4AI score0.02345EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/03/19 4:15 a.m.•11 views

PYSEC-2021-37

An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries...

7.5CVSS7AI score0.01398EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder