Lucene search
Veracode Vulnerability DatabaseVERACODE:30399HistoryMay 10, 2021 - 4:00 a.m.
Denial Of Service (DoS)
2021-05-1004:00:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
24
data validation
blpimageplugin
denial of service
EPSS
0.001
Percentile
32.6%
pillow is vulnerable to denial of service. Lack of validation and checks for the validity of return data when jumping to file offsets in the BlpImagePlugin results in a denial-of-service condition.
Related
cvelist
cvelist
CVE-2021-28678
2021-06-02 15:16:23
cve
cve
CVE-2021-28678
2021-06-02 16:15:08
osv
osv
CVE-2021-28678
2021-06-02 16:15:08
Insufficient Verification of Data Authenticity in Pillow
2021-06-08 18:49:20
PYSEC-2021-94
2021-06-02 16:15:00
alpinelinux
alpinelinux
CVE-2021-28678
2021-06-02 16:15:08
redhatcve
redhatcve
CVE-2021-28678
2021-05-11 20:55:35
debiancve
debiancve
CVE-2021-28678
2021-06-02 16:15:08
nvd
nvd
CVE-2021-28678
2021-06-02 16:15:08
cnvd
cnvd
Pillow Denial of Service Vulnerability (CNVD-2021-54029)
2021-06-04 00:00:00
prion
prion
Design/Logic Flaw
2021-06-02 16:15:00
ubuntucve
ubuntucve
CVE-2021-28678
2021-05-10 00:00:00
github
github
Insufficient Verification of Data Authenticity in Pillow
2021-06-08 18:49:20
nessus
nessus
EulerOS 2.0 SP3 : python-pillow (EulerOS-SA-2021-2611)
2021-10-25 00:00:00
FreeBSD : Pillow -- multiple vulnerabilities (f947aa26-b2f9-11eb-a5f7-a0f3c100ae18)
2021-05-13 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : Pillow vulnerabilities (USN-4963-1)
2021-05-20 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2611)
2021-10-26 00:00:00
Ubuntu: Security Advisory (USN-4963-1)
2021-05-20 00:00:00
Fedora: Security Advisory for mingw-python-pillow (FEDORA-2021-77756994ba)
2021-06-03 00:00:00
freebsd
freebsd
Pillow -- multiple vulnerabilities
2021-04-01 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: python-pillow-8.1.2-3.fc34
2021-05-30 17:30:05
[SECURITY] Fedora 34 Update: mingw-python-pillow-8.1.2-2.fc34
2021-05-30 17:30:05
[SECURITY] Fedora 33 Update: mingw-python-pillow-7.2.0-6.fc33
2021-06-03 01:01:42
ubuntu
ubuntu
Pillow vulnerabilities
2021-05-19 00:00:00
mageia
mageia
Updated python-pillow packages fix security vulnerabilities
2021-08-06 12:33:48
almalinux
almalinux
Moderate: python-pillow security update
2021-11-09 08:24:34
gentoo
gentoo
Pillow: Multiple vulnerabilities
2021-07-14 00:00:00
redhat
redhat
(RHSA-2021:4149) Moderate: python-pillow security update
2021-11-09 08:24:34
rocky
rocky
python-pillow security update
2021-11-09 08:24:34