Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-35655

Опубликовано: 12 янв. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5.8
CVSS3: 5.4

Описание

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.

РелизСтатусПримечание
bionic

released

5.1.0-1ubuntu0.4
devel

not-affected

8.1.0-1
esm-infra-legacy/trusty

not-affected

esm-infra/bionic

released

5.1.0-1ubuntu0.4
esm-infra/focal

released

7.0.0-4ubuntu0.2
esm-infra/xenial

not-affected

3.1.2-0ubuntu1.4
focal

released

7.0.0-4ubuntu0.2
groovy

released

7.2.0-1ubuntu0.1
hirsute

not-affected

8.1.0-1
impish

not-affected

8.1.0-1

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/focal

needs-triage

esm-infra-legacy/trusty

DNE

focal

ignored

end of standard support, was needs-triage
groovy

ignored

end of life
hirsute

DNE

impish

DNE

jammy

DNE

kinetic

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

jammy

DNE

kinetic

DNE

Показывать по

EPSS

Процентиль: 50%
0.00269
Низкий

5.8 Medium

CVSS2

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
redhat
около 5 лет назад

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.

CVSS3: 5.4
nvd
около 5 лет назад

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.

CVSS3: 5.4
debian
около 5 лет назад

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read whe ...

CVSS3: 5.4
github
почти 5 лет назад

Pillow Out-of-bounds Read

suse-cvrf
больше 4 лет назад

Security update for python-CairoSVG, python-Pillow

EPSS

Процентиль: 50%
0.00269
Низкий

5.8 Medium

CVSS2

5.4 Medium

CVSS3