Логотип exploitDog
bind:"GHSA-hjfx-8p6c-g7gx" OR bind:"CVE-2021-28678"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-hjfx-8p6c-g7gx" OR bind:"CVE-2021-28678"

Количество 7

Количество 7

github логотип

GHSA-hjfx-8p6c-g7gx

больше 4 лет назад

Insufficient Verification of Data Authenticity in Pillow

CVSS3: 5.5
EPSS: Низкий
ubuntu логотип

CVE-2021-28678

больше 4 лет назад

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2021-28678

почти 5 лет назад

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2021-28678

больше 4 лет назад

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2021-28678

больше 4 лет назад

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImage ...

CVSS3: 5.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:1607-1

больше 1 года назад

Security update for python-Pillow

EPSS: Низкий
rocky логотип

RLSA-2021:4149

больше 4 лет назад

Moderate: python-pillow security update

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-hjfx-8p6c-g7gx

Insufficient Verification of Data Authenticity in Pillow

CVSS3: 5.5
0%
Низкий
больше 4 лет назад
ubuntu логотип
CVE-2021-28678

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.

CVSS3: 5.5
0%
Низкий
больше 4 лет назад
redhat логотип
CVE-2021-28678

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.

CVSS3: 7.5
0%
Низкий
почти 5 лет назад
nvd логотип
CVE-2021-28678

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.

CVSS3: 5.5
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-28678

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImage ...

CVSS3: 5.5
0%
Низкий
больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2024:1607-1

Security update for python-Pillow

больше 1 года назад
rocky логотип
RLSA-2021:4149

Moderate: python-pillow security update

больше 4 лет назад

Уязвимостей на страницу