Логотип exploitDog
bind:CVE-2021-28677
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-28677

Количество 8

Количество 8

ubuntu логотип

CVE-2021-28677

больше 4 лет назад

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2021-28677

почти 5 лет назад

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2021-28677

больше 4 лет назад

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2021-28677

больше 4 лет назад

An issue was discovered in Pillow before 8.2.0. For EPS data, the read ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-q5hq-fp76-qmrc

больше 4 лет назад

Uncontrolled Resource Consumption in Pillow

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2021-05313

почти 5 лет назад

Уязвимость реализации readline компонента EPSImageFile библиотеки для работы с изображениями Pillow, связанная с недостаточной проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:1607-1

больше 1 года назад

Security update for python-Pillow

EPSS: Низкий
rocky логотип

RLSA-2021:4149

около 4 лет назад

Moderate: python-pillow security update

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-28677

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
0%
Низкий
больше 4 лет назад
redhat логотип
CVE-2021-28677

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
0%
Низкий
почти 5 лет назад
nvd логотип
CVE-2021-28677

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CVSS3: 7.5
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-28677

An issue was discovered in Pillow before 8.2.0. For EPS data, the read ...

CVSS3: 7.5
0%
Низкий
больше 4 лет назад
github логотип
GHSA-q5hq-fp76-qmrc

Uncontrolled Resource Consumption in Pillow

CVSS3: 7.5
0%
Низкий
больше 4 лет назад
fstec логотип
BDU:2021-05313

Уязвимость реализации readline компонента EPSImageFile библиотеки для работы с изображениями Pillow, связанная с недостаточной проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
0%
Низкий
почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2024:1607-1

Security update for python-Pillow

больше 1 года назад
rocky логотип
RLSA-2021:4149

Moderate: python-pillow security update

около 4 лет назад

Уязвимостей на страницу