Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2022-45199
HistoryNov 14, 2022 - 7:15 a.m.

CVE-2022-45199

2022-11-1407:15:10
CWE-400
mitre
web.nvd.nist.gov
76
10
pillow
cve-2022-45199
denial of service
vulnerability
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

57.9%

JSON

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.

Affected configurations

Nvd
Node
pythonpillowRange<9.3.0
VendorProductVersionCPE
pythonpillow*cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*

Social References

More

Related

ubuntucve 1
osv 4
github 1
openvas 12
nessus 14
debiancve 1
veracode 1
prion 1
cvelist 1
nvd 1
redos 1
gentoo 1
oracle 1
ubuntucve
ubuntucve
CVE-2022-45199
2022-11-14 00:00:00
osv
osv
BIT-pillow-2022-45199
2024-03-06 11:01:50
CVE-2022-45199
2022-11-14 07:15:10
PYSEC-2022-42980
2022-11-14 07:15:00
github
github
Pillow subject to DoS via SAMPLESPERPIXEL tag
2022-11-14 12:00:15
openvas
openvas
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1481)
2023-03-09 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1456)
2023-03-09 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1681)
2023-04-27 00:00:00
nessus
nessus
EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2023-1456)
2023-03-08 00:00:00
EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2023-1481)
2023-03-08 00:00:00
EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2023-1397)
2023-02-10 00:00:00
debiancve
debiancve
CVE-2022-45199
2022-11-14 07:15:10
veracode
veracode
Denial Of Service (DoS)
2022-11-15 08:16:50
prion
prion
Code injection
2022-11-14 07:15:00
cvelist
cvelist
CVE-2022-45199
2022-11-14 00:00:00
nvd
nvd
CVE-2022-45199
2022-11-14 07:15:10
redos
redos
ROS-20230428-04
2023-04-28 00:00:00
gentoo
gentoo
Pillow: Multiple Vulnerabilities
2022-11-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

57.9%

JSON
Related for CVE-2022-45199
ubuntucve1osv4github1openvas12nessus14debiancve1veracode1prion1cvelist1nvd1redos1gentoo1oracle1