Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 8

Количество 8

fstec логотип

BDU:2021-05313

больше 5 лет назад

Уязвимость реализации readline компонента EPSImageFile библиотеки для работы с изображениями Pillow, связанная с недостаточной проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2021-28677

больше 5 лет назад

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2021-28677

больше 5 лет назад

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2021-28677

больше 5 лет назад

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2021-28677

больше 5 лет назад

An issue was discovered in Pillow before 8.2.0. For EPS data, the read ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-q5hq-fp76-qmrc

около 5 лет назад

Uncontrolled Resource Consumption in Pillow

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:1607-1

больше 2 лет назад

Security update for python-Pillow

EPSS: Низкий
rocky логотип

RLSA-2021:4149

почти 5 лет назад

Moderate: python-pillow security update

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2021-05313

Уязвимость реализации readline компонента EPSImageFile библиотеки для работы с изображениями Pillow, связанная с недостаточной проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
2%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2021-28677

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
2%
Низкий
больше 5 лет назад
redhat логотип
CVE-2021-28677

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
2%
Низкий
больше 5 лет назад
nvd логотип
CVE-2021-28677

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
2%
Низкий
больше 5 лет назад
debian логотип
CVE-2021-28677

An issue was discovered in Pillow before 8.2.0. For EPS data, the read ...

CVSS3: 7.5
2%
Низкий
больше 5 лет назад
github логотип
GHSA-q5hq-fp76-qmrc

Uncontrolled Resource Consumption in Pillow

CVSS3: 7.5
2%
Низкий
около 5 лет назад
suse-cvrf логотип
SUSE-SU-2024:1607-1

Security update for python-Pillow

больше 2 лет назад
rocky логотип
RLSA-2021:4149

Moderate: python-pillow security update

почти 5 лет назад

Уязвимостей на страницу