Логотип exploitDog
bind:"BDU:2021-05313" OR bind:"CVE-2021-28677"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2021-05313" OR bind:"CVE-2021-28677"

Количество 8

Количество 8

fstec логотип

BDU:2021-05313

почти 5 лет назад

Уязвимость реализации readline компонента EPSImageFile библиотеки для работы с изображениями Pillow, связанная с недостаточной проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2021-28677

больше 4 лет назад

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2021-28677

почти 5 лет назад

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2021-28677

больше 4 лет назад

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2021-28677

больше 4 лет назад

An issue was discovered in Pillow before 8.2.0. For EPS data, the read ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-q5hq-fp76-qmrc

больше 4 лет назад

Uncontrolled Resource Consumption in Pillow

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:1607-1

больше 1 года назад

Security update for python-Pillow

EPSS: Низкий
rocky логотип

RLSA-2021:4149

больше 4 лет назад

Moderate: python-pillow security update

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2021-05313

Уязвимость реализации readline компонента EPSImageFile библиотеки для работы с изображениями Pillow, связанная с недостаточной проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
0%
Низкий
почти 5 лет назад
ubuntu логотип
CVE-2021-28677

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
0%
Низкий
больше 4 лет назад
redhat логотип
CVE-2021-28677

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
0%
Низкий
почти 5 лет назад
nvd логотип
CVE-2021-28677

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-28677

An issue was discovered in Pillow before 8.2.0. For EPS data, the read ...

CVSS3: 7.5
0%
Низкий
больше 4 лет назад
github логотип
GHSA-q5hq-fp76-qmrc

Uncontrolled Resource Consumption in Pillow

CVSS3: 7.5
0%
Низкий
больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2024:1607-1

Security update for python-Pillow

больше 1 года назад
rocky логотип
RLSA-2021:4149

Moderate: python-pillow security update

больше 4 лет назад

Уязвимостей на страницу