Lucene search
Veracode Vulnerability DatabaseVERACODE:29015HistoryJan 15, 2021 - 6:17 a.m.
Denial Of Service (DoS)
2021-01-1506:17:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.001 Low
EPSS
Percentile
44.9%
pillow is vulnerable to denial of service. The vulnerability exists as the code offset and length tables were not properly sanitized, causing a 4 byte read overflow in SGIRleDecode.c and an application crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pillow | le | 8.0.1 | |
| py3-pillow:3.12 | eq | 7.1.2-r0 | |
| py3-pillow:edge | eq | 6.2.2-r1 | |
| py3-pillow:edge | eq | 7.1.1-r0 | |
| py3-pillow:edge | eq | 7.1.2-r0 | |
| py3-pillow:edge | eq | 6.2.2-r0 |
References
Related
osv
osv
PYSEC-2021-71
2021-01-12 09:15:00
CVE-2020-35655
2021-01-12 09:15:13
BIT-pillow-2020-35655
2024-03-06 11:06:15
ubuntucve
ubuntucve
CVE-2020-35655
2021-01-12 00:00:00
github
github
Pillow Out-of-bounds Read
2021-03-18 19:55:34
cve
cve
CVE-2020-35655
2021-01-12 09:15:13
alpinelinux
alpinelinux
CVE-2020-35655
2021-01-12 09:15:13
redhatcve
redhatcve
CVE-2020-35655
2021-01-12 16:20:06
cvelist
cvelist
CVE-2020-35655
2021-01-12 08:08:47
nvd
nvd
CVE-2020-35655
2021-01-12 09:15:13
prion
prion
Buffer overflow
2021-01-12 09:15:00
debiancve
debiancve
CVE-2020-35655
2021-01-12 09:15:13
openvas
openvas
Fedora: Security Advisory for mingw-python-pillow (FEDORA-2021-a8ddc1ce70)
2021-01-21 00:00:00
Fedora: Security Advisory for python-pillow (FEDORA-2021-880aa7bd27)
2021-01-25 00:00:00
Fedora: Security Advisory for python-pillow (FEDORA-2021-a8ddc1ce70)
2021-01-21 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: mingw-python-pillow-7.2.0-3.fc33
2021-01-21 01:47:28
[SECURITY] Fedora 33 Update: python-pillow-7.2.0-3.fc33
2021-01-21 01:47:29
[SECURITY] Fedora 32 Update: python-pillow-7.0.0-5.fc32
2021-01-24 01:23:46
nessus
nessus
Fedora 33 : mingw-python-pillow / python-pillow (2021-a8ddc1ce70)
2021-01-21 00:00:00
Fedora 32 : python-pillow (2021-880aa7bd27)
2021-01-25 00:00:00
gentoo
gentoo
Pillow: Multiple vulnerabilities
2021-01-11 00:00:00
ubuntu
ubuntu
Pillow vulnerabilities
2021-01-18 00:00:00
archlinux
archlinux
[ASA-202101-11] python-pillow: multiple issues
2021-01-12 00:00:00
suse
suse
Security update for python-CairoSVG, python-Pillow (moderate)
2021-08-10 00:00:00
rocky
rocky
python-pillow security update
2021-11-09 08:24:34
redhat
redhat
(RHSA-2021:4149) Moderate: python-pillow security update
2021-11-09 08:24:34
almalinux
almalinux
Moderate: python-pillow security update
2021-11-09 08:24:34