Lucene search

K

GoogleOSV:CVE-2021-28675

HistoryJun 02, 2021 - 3:15 p.m.

CVE-2021-28675

2021-06-0215:15:07

Google

osv.dev

3

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.2%

An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a DoS on Image.open prior to Image.load.

CPENameOperatorVersion
pilloweq4.0.0
pilloweq1.7.6
py3-pilloweq8.1.2-r0
pilloweq1.7.7
pilloweq2.9.0.dev0
pilloweq7.2.0
py3-pilloweq7.1.1-r0
pilloweq2.0.0
pilloweq2.7.0
pilloweq2.2.2

Rows per page:

1-10 of 521

References

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/

pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28675-fix-dos-in-psdimageplugin

security.gentoo.org/glsa/202107-33

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.2%

Related for OSV:CVE-2021-28675

github1 osv6 debiancve1 nvd1 cve1 redhatcve1 cnvd1 alpinelinux1 veracode1 ubuntucve1 amazon1 prion1 nessus22 cvelist1 openvas19 freebsd1 fedora4 ubuntu1 mageia1 gentoo1 rocky1 redhat1 almalinux1