Lucene search
Veracode Vulnerability DatabaseVERACODE:38003HistoryNov 15, 2022 - 7:24 a.m.
Denial Of Service (DoS)
2022-11-1507:24:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
pillow
denial of service
gif
vulnerability
application crash
remote attacker
EPSS
0.003
Percentile
69.6%
Pillow is vulnerable to denial of service (DoS). A remote attacker is able to cause an application crash by passing a maliciously crafted GIF file containing malformed data through the _seek function.
References
bugs.gentoo.org/855683
cwe.mitre.org/data/definitions/409.html
github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4
github.com/python-pillow/Pillow/commit/884437f8a2b953a0abd2a3b130a87fcfb438092e
github.com/python-pillow/Pillow/pull/6402
github.com/python-pillow/Pillow/releases/tag/9.2.0
security.gentoo.org/glsa/202211-10
Related
openvas
openvas
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-2245)
2023-06-12 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1134)
2023-01-09 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1606)
2023-04-13 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : python-pillow (EulerOS-SA-2023-1606)
2023-04-13 00:00:00
EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2023-1110)
2023-01-06 00:00:00
github
github
Pillow vulnerable to Data Amplification attack.
2022-11-14 12:00:15
osv
osv
Pillow vulnerable to Data Amplification attack.
2022-11-14 12:00:15
Security update for python-Pillow
2024-08-18 16:01:19
BIT-pillow-2022-45198
2024-03-06 11:02:02
cve
cve
CVE-2022-45198
2022-11-14 07:15:10
nvd
nvd
CVE-2022-45198
2022-11-14 07:15:10
cvelist
cvelist
CVE-2022-45198
2022-11-14 00:00:00
ubuntucve
ubuntucve
CVE-2022-45198
2022-11-14 00:00:00
prion
prion
Design/Logic Flaw
2022-11-14 07:15:00
debiancve
debiancve
CVE-2022-45198
2022-11-14 07:15:10
ubuntu
ubuntu
Pillow vulnerabilities
2022-12-13 00:00:00
Pillow vulnerabilities
2022-12-14 00:00:00
mageia
mageia
Updated python-pillow packages fix security vulnerability
2023-05-16 22:17:40
redos
redos
ROS-20230428-04
2023-04-28 00:00:00
gentoo
gentoo
Pillow: Multiple Vulnerabilities
2022-11-22 00:00:00