Lucene search
GoogleOSV:GHSA-CFMR-38G9-F2H7HistoryMay 14, 2022 - 2:05 a.m.
Pillow denial of service via Crafted Block Size
2022-05-1402:05:20
Google
osv.dev
10
pillow
denial of service
crafted block size
python imaging library
EPSS
0.017
Percentile
87.9%
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
References
lists.opensuse.org/opensuse-updates/2015-04/msg00056.html
www.debian.org/security/2014/dsa-3009
github.com/python-pillow/Pillow/commit/205e056f8f9b06ed7b925cf8aa0874bc4aaf8a7d
github.com/python-pillow/Pillow/commit/5efeed77666bfd17708f3434b1d2daa9db1e1335
github.com/python-pillow/Pillow/commit/d47611e6fbb808ea109366781dd76559ffb80bcd
nvd.nist.gov/vuln/detail/CVE-2014-3589
pypi.python.org/pypi/Pillow/2.3.2
pypi.python.org/pypi/Pillow/2.5.2
Related
nessus
nessus
Debian DLA-41-1 : python-imaging security update
2015-03-26 00:00:00
Fedora 20 : python-pillow-2.2.1-5.fc20 (2014-9540)
2014-08-27 00:00:00
cve
cve
CVE-2014-3589
2014-08-25 14:55:06
osv
osv
python-imaging - security update
2014-08-21 00:00:00
PYSEC-2014-10
2014-08-25 14:55:00
ubuntucve
ubuntucve
CVE-2014-3589
2014-08-25 00:00:00
debian
debian
[DLA 41-1] python-imaging security update
2014-08-24 16:38:21
[SECURITY] [DSA 3009-1] python-imaging security update
2014-08-21 18:09:34
mageia
mageia
Updated python-imaging & python-pillow packages fix CVE-2014-3589
2014-08-21 13:36:13
prion
prion
Code injection
2014-08-25 14:55:00
securityvulns
securityvulns
Python Imaging Library DoS
2014-08-26 00:00:00
[SECURITY] [DSA 3009-1] python-imaging security update
2014-08-26 00:00:00
pillow multiple security vulnerabilities
2015-04-19 00:00:00
nvd
nvd
CVE-2014-3589
2014-08-25 14:55:06
debiancve
debiancve
CVE-2014-3589
2014-08-25 14:55:06
openvas
openvas
Debian: Security Advisory (DLA-41-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3009-1)
2014-08-20 00:00:00
Mageia: Security Advisory (MGASA-2014-0343)
2022-01-28 00:00:00
cvelist
cvelist
CVE-2014-3589
2014-08-25 14:00:00
github
github
Pillow denial of service via Crafted Block Size
2022-05-14 02:05:20
fedora
fedora
[SECURITY] Fedora 20 Update: python-pillow-2.2.1-5.fc20
2014-08-27 01:32:03
[SECURITY] Fedora 19 Update: python-pillow-2.0.0-14.gitd1c6db8.fc19
2014-08-27 01:29:32
[SECURITY] Fedora 19 Update: python-pillow-2.0.0-16.gitd1c6db8.fc19
2014-11-22 12:40:12
ubuntu
ubuntu
Python Imaging Library vulnerabilities
2016-09-15 00:00:00
Pillow vulnerabilities
2016-09-27 00:00:00
Pillow regresssion
2016-09-30 00:00:00