Lucene search
Gentoo FoundationMGASA-2014-0343HistoryAug 21, 2014 - 1:36 p.m.
Updated python-imaging & python-pillow packages fix CVE-2014-3589
2014-08-2113:36:13
Gentoo Foundation
advisories.mageia.org
20
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.017
Percentile
87.9%
Updated python-imaging and python-pillow packages fix security vulnerabilities: The Python Imaging Library is vulnerable to a denial of service attack in the IcnsImagePlugin (CVE-2014-3589).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | python-imaging | < 1.1.7-7.2 | python-imaging-1.1.7-7.2.mga3 |
| Mageia | 4 | noarch | python-pillow | < 2.2.1-0.5 | python-pillow-2.2.1-0.5.mga4 |
Related
securityvulns
securityvulns
Python Imaging Library DoS
2014-08-26 00:00:00
[SECURITY] [DSA 3009-1] python-imaging security update
2014-08-26 00:00:00
[ MDVSA-2015:099 ] python-pillow
2015-04-19 00:00:00
nvd
nvd
CVE-2014-3589
2014-08-25 14:55:06
nessus
nessus
Debian DSA-3009-1 : python-imaging - security update
2014-08-23 00:00:00
Fedora 19 : python-pillow-2.0.0-14.gitd1c6db8.fc19 (2014-9536)
2014-08-27 00:00:00
Fedora 20 : python-pillow-2.2.1-5.fc20 (2014-9540)
2014-08-27 00:00:00
debiancve
debiancve
CVE-2014-3589
2014-08-25 14:55:06
openvas
openvas
Debian: Security Advisory (DLA-41-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3009-1)
2014-08-20 00:00:00
Mageia: Security Advisory (MGASA-2014-0343)
2022-01-28 00:00:00
ubuntucve
ubuntucve
CVE-2014-3589
2014-08-25 00:00:00
debian
debian
[DLA 41-1] python-imaging security update
2014-08-24 16:38:21
[SECURITY] [DSA 3009-1] python-imaging security update
2014-08-21 18:09:34
prion
prion
Code injection
2014-08-25 14:55:00
cve
cve
CVE-2014-3589
2014-08-25 14:55:06
osv
osv
python-imaging - security update
2014-08-21 00:00:00
PYSEC-2014-10
2014-08-25 14:55:00
Pillow denial of service via Crafted Block Size
2022-05-14 02:05:20
cvelist
cvelist
CVE-2014-3589
2014-08-25 14:00:00
github
github
Pillow denial of service via Crafted Block Size
2022-05-14 02:05:20
fedora
fedora
[SECURITY] Fedora 20 Update: python-pillow-2.2.1-5.fc20
2014-08-27 01:32:03
[SECURITY] Fedora 19 Update: python-pillow-2.0.0-14.gitd1c6db8.fc19
2014-08-27 01:29:32
[SECURITY] Fedora 19 Update: python-pillow-2.0.0-16.gitd1c6db8.fc19
2014-11-22 12:40:12
ubuntu
ubuntu
Python Imaging Library vulnerabilities
2016-09-15 00:00:00
Pillow vulnerabilities
2016-09-27 00:00:00
Pillow regresssion
2016-09-30 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.017
Percentile
87.9%
Related for MGASA-2014-0343