Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-28677
HistoryJun 02, 2021 - 4:15 p.m.

Design/Logic Flaw

2021-06-0216:15:00
PRIOn knowledge base
www.prio-n.com
11

8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.4%

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CPENameOperatorVersion
fedoraeq33
pillowlt8.2.0