Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-28677
HistoryMay 10, 2021 - 12:00 a.m.

CVE-2021-28677

2021-05-1000:00:00
ubuntu.com
ubuntu.com
9

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

51.6%

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline
implementation used in EPSImageFile has to deal with any combination of \r
and \n as line endings. It used an accidentally quadratic method of
accumulating lines while looking for a line ending. A malicious EPS file
could use this to perform a DoS of Pillow in the open phase, before an
image was accepted for opening.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchpillow< 5.1.0-1ubuntu0.6UNKNOWN
ubuntu20.04noarchpillow< 7.0.0-4ubuntu0.4UNKNOWN
ubuntu20.10noarchpillow< 7.2.0-1ubuntu0.3UNKNOWN
ubuntu21.04noarchpillow< 8.1.2-1ubuntu0.1UNKNOWN
ubuntu21.10noarchpillow< 8.1.2+dfsg-0.1ubuntu1UNKNOWN
ubuntu22.04noarchpillow< 8.1.2+dfsg-0.1ubuntu1UNKNOWN
ubuntu22.10noarchpillow< 8.1.2+dfsg-0.1ubuntu1UNKNOWN
ubuntu23.04noarchpillow< 8.1.2+dfsg-0.1ubuntu1UNKNOWN
ubuntu23.10noarchpillow< 8.1.2+dfsg-0.1ubuntu1UNKNOWN
ubuntu14.04noarchpillow< anyUNKNOWN
Rows per page:
1-10 of 121

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

51.6%