Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-27922

Опубликовано: 03 мар. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large.

РелизСтатусПримечание
bionic

released

5.1.0-1ubuntu0.5
devel

not-affected

8.1.2-1
esm-infra-legacy/trusty

needs-triage

esm-infra/bionic

released

5.1.0-1ubuntu0.5
esm-infra/focal

released

7.0.0-4ubuntu0.3
esm-infra/xenial

released

3.1.2-0ubuntu1.6
focal

released

7.0.0-4ubuntu0.3
groovy

released

7.2.0-1ubuntu0.2
hirsute

not-affected

8.1.2-1
impish

not-affected

8.1.2-1

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/focal

needs-triage

esm-infra-legacy/trusty

DNE

focal

ignored

end of standard support, was needs-triage
groovy

ignored

end of life
hirsute

DNE

impish

DNE

jammy

DNE

kinetic

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

jammy

DNE

kinetic

DNE

Показывать по

EPSS

Процентиль: 35%
0.00145
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
почти 5 лет назад

Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large.

CVSS3: 7.5
nvd
почти 5 лет назад

Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large.

CVSS3: 7.5
debian
почти 5 лет назад

Pillow before 8.1.2 allows attackers to cause a denial of service (mem ...

CVSS3: 7.5
github
почти 5 лет назад

Pillow Uncontrolled Resource Consumption

suse-cvrf
больше 1 года назад

Security update for python-Pillow

EPSS

Процентиль: 35%
0.00145
Низкий

5 Medium

CVSS2

7.5 High

CVSS3