Lucene search
Veracode Vulnerability DatabaseVERACODE:29587HistoryMar 08, 2021 - 2:01 a.m.
Regular Expression Denial Of Service (DoS)
2021-03-0802:01:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.002 Low
EPSS
Percentile
64.4%
pillow is vulnerable to regular expression denial of service. Usage of an insecure regex allows an attacker to cause excessive CPU consumption when parsing a malicious PDF file.
References
github.com/python-pillow/Pillow/commit/3bce145966374dd39ce58a6fc0083f8d1890719c
lists.fedoraproject.org/archives/list/[email protected]/message/S7G44Z33J4BNI2DPDROHWGVG2U7ZH5JU/
lists.fedoraproject.org/archives/list/[email protected]/message/TQQY6472RX4J2SUJENWDZAWKTJJGP2ML/
lists.fedoraproject.org/archives/list/[email protected]/message/ZTSY25UJU7NJUFHH3HWT575LT4TDFWBZ/
pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html
security.gentoo.org/glsa/202107-33
Related
osv
osv
Pillow Uncontrolled Resource Consumption
2021-03-18 19:55:21
BIT-pillow-2021-27922
2024-03-06 11:04:03
CVE-2021-27922
2021-03-03 09:15:14
nvd
nvd
CVE-2021-27922
2021-03-03 09:15:14
cve
cve
CVE-2021-27922
2021-03-03 09:15:14
cvelist
cvelist
CVE-2021-27922
2021-03-03 08:41:50
debiancve
debiancve
CVE-2021-27922
2021-03-03 09:15:14
github
github
Pillow Uncontrolled Resource Consumption
2021-03-18 19:55:21
redhatcve
redhatcve
CVE-2021-27922
2021-03-04 20:09:56
ubuntucve
ubuntucve
CVE-2021-27922
2021-03-03 00:00:00
alpinelinux
alpinelinux
CVE-2021-27922
2021-03-03 09:15:14
prion
prion
Design/Logic Flaw
2021-03-03 09:15:00
openvas
openvas
Fedora: Security Advisory for python-pillow (FEDORA-2021-9016a9b7bd)
2021-03-20 00:00:00
Fedora: Security Advisory for mingw-python-pillow (FEDORA-2021-9016a9b7bd)
2021-03-20 00:00:00
Ubuntu: Security Advisory (USN-4763-1)
2021-03-12 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: python-pillow-8.1.2-1.fc34
2021-03-19 20:28:49
[SECURITY] Fedora 34 Update: mingw-python-pillow-8.1.2-1.fc34
2021-03-19 20:28:49
[SECURITY] Fedora 33 Update: mingw-python-pillow-7.2.0-5.fc33
2021-03-15 01:20:06
ubuntu
ubuntu
Pillow vulnerabilities
2021-03-11 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : python-pillow (EulerOS-SA-2021-2314)
2021-08-10 00:00:00
Fedora 32 : python-pillow / python2-pillow (2021-0ece308612)
2021-03-15 00:00:00
suse
suse
Security update for python-CairoSVG, python-Pillow (moderate)
2021-08-10 00:00:00
gentoo
gentoo
Pillow: Multiple vulnerabilities
2021-07-14 00:00:00
redhat
redhat
(RHSA-2021:4149) Moderate: python-pillow security update
2021-11-09 08:24:34
rocky
rocky
python-pillow security update
2021-11-09 08:24:34
almalinux
almalinux
Moderate: python-pillow security update
2021-11-09 08:24:34
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40