Lucene search
Veracode Vulnerability DatabaseVERACODE:22249HistoryJan 06, 2020 - 3:50 a.m.
Denial Of Service (DoS)
2020-01-0603:50:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.008 Low
EPSS
Percentile
81.9%
pillow is vulnerable to denial of service (DoS). The vulnerability exists as there was a lack of validation of image size during decompression of images in the ImagingSgiRleDecode function, causing an SGI buffer overflow.
References
access.redhat.com/errata/RHSA-2020:0566
access.redhat.com/errata/RHSA-2020:0580
github.com/python-pillow/Pillow/commit/a79b65c47c7dc6fe623aadf09aa6192fc54548f3
lists.fedoraproject.org/archives/list/[email protected]/message/2MMU3WT2X64GS5WHDPKKC2WZA7UIIQ3A/
lists.fedoraproject.org/archives/list/[email protected]/message/3DUMIBUYGJRAVJCTFUWBRLVQKOUTVX5P/
pillow.readthedocs.io/en/stable/releasenotes/6.2.2.html
usn.ubuntu.com/4272-1/
www.debian.org/security/2020/dsa-4631
Related
cve
cve
CVE-2020-5311
2020-01-03 01:15:11
CVE-2020-11538
2020-06-25 19:15:12
ubuntucve
ubuntucve
CVE-2020-5311
2020-01-03 00:00:00
CVE-2020-11538
2020-06-25 00:00:00
cvelist
cvelist
CVE-2020-5311
2020-01-03 00:52:42
CVE-2020-11538
2020-06-25 18:32:06
debiancve
debiancve
CVE-2020-5311
2020-01-03 01:15:11
CVE-2020-11538
2020-06-25 19:15:12
prion
prion
Buffer overflow
2020-01-03 01:15:00
Out-of-bounds
2020-06-25 19:15:00
osv
osv
BIT-pillow-2020-5311
2024-03-06 11:05:57
PYSEC-2020-82
2020-01-03 01:15:00
Buffer Copy without Checking Size of Input in Pillow
2022-05-24 17:05:33
github
github
Buffer Copy without Checking Size of Input in Pillow
2022-05-24 17:05:33
Out-of-bounds read in Pillow
2020-07-27 21:52:36
nvd
nvd
CVE-2020-5311
2020-01-03 01:15:11
CVE-2020-11538
2020-06-25 19:15:12
alpinelinux
alpinelinux
CVE-2020-5311
2020-01-03 01:15:11
redhatcve
redhatcve
CVE-2020-5311
2020-01-09 19:09:04
nessus
nessus
RHEL 8 : python-pillow (RHSA-2020:0580)
2020-02-25 00:00:00
RHEL 8 : python-pillow (RHSA-2020:0566)
2020-02-24 00:00:00
Oracle Linux 8 : python-pillow (ELSA-2020-0580)
2020-02-26 00:00:00
oraclelinux
oraclelinux
python-pillow security update
2020-02-25 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-1877)
2020-08-31 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-2024)
2020-09-29 00:00:00
Fedora: Security Advisory for python-pillow (FEDORA-2020-df444e464e)
2020-01-31 00:00:00
redhat
redhat
(RHSA-2020:0580) Important: python-pillow security update
2020-02-24 12:25:31
(RHSA-2020:0566) Important: python-pillow security update
2020-02-20 21:57:19
(RHSA-2021:0420) Moderate: Red Hat Quay v3.4.0 security update
2021-02-04 16:10:17
fedora
fedora
[SECURITY] Fedora 30 Update: python-pillow-5.4.1-4.fc30
2020-02-22 01:16:45
[SECURITY] Fedora 31 Update: python-pillow-6.2.2-1.fc31
2020-01-31 02:02:49
freebsd
freebsd
Pillow -- Multiple vulnerabilities
2019-12-19 00:00:00
debian
debian
[SECURITY] [DSA 4631-1] pillow security update
2020-02-21 20:22:04
ibm
ibm
ubuntu
ubuntu
Pillow vulnerabilities
2020-02-06 00:00:00
mageia
mageia
Updated python-pillow packages fix security vulnerabilities
2020-02-18 17:05:53
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40