Lucene search
GoogleOSV:PYSEC-2020-172HistoryJan 05, 2020 - 10:15 p.m.
PYSEC-2020-172
2020-01-0522:15:00
Google
osv.dev
11
0.002 Low
EPSS
Percentile
61.5%
There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux running 64-bit Python this results in the process being terminated by the OOM killer.
Related
redhatcve
redhatcve
CVE-2019-19911
2020-01-09 19:09:03
alpinelinux
alpinelinux
CVE-2019-19911
2020-01-05 22:15:11
nvd
nvd
CVE-2019-19911
2020-01-05 22:15:11
osv
osv
Uncontrolled Resource Consumption in Pillow
2020-04-01 16:36:44
CVE-2019-19911
2020-01-05 22:15:11
pillow - security update
2020-01-06 00:00:00
ubuntucve
ubuntucve
CVE-2019-19911
2020-01-05 00:00:00
cvelist
cvelist
CVE-2019-19911
2020-01-05 21:57:24
debiancve
debiancve
CVE-2019-19911
2020-01-05 22:15:11
github
github
Uncontrolled Resource Consumption in Pillow
2020-04-01 16:36:44
prion
prion
Design/Logic Flaw
2020-01-05 22:15:00
veracode
veracode
Denial Of Service (DoS)
2020-01-06 02:51:37
cve
cve
CVE-2019-19911
2020-01-05 22:15:11
openvas
openvas
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-2024)
2020-09-29 00:00:00
Debian: Security Advisory (DSA-4631-1)
2020-02-23 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-1877)
2020-08-31 00:00:00
debian
debian
[SECURITY] [DLA 2057-1] pillow security update
2020-01-06 16:51:36
[SECURITY] [DSA 4631-1] pillow security update
2020-02-21 20:22:04
nessus
nessus
Debian DLA-2057-1 : pillow security update
2020-01-07 00:00:00
EulerOS 2.0 SP8 : python-pillow (EulerOS-SA-2020-1877)
2020-08-28 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: python-pillow-5.4.1-4.fc30
2020-02-22 01:16:45
freebsd
freebsd
Pillow -- Multiple vulnerabilities
2019-12-19 00:00:00
ibm
ibm
ubuntu
ubuntu
Pillow vulnerabilities
2020-02-06 00:00:00
mageia
mageia
Updated python-pillow packages fix security vulnerabilities
2020-02-18 17:05:53
redhat
redhat
(RHSA-2021:0420) Moderate: Red Hat Quay v3.4.0 security update
2021-02-04 16:10:17
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40