CVE-2019-16865
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.1%
An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image.
Produtos afetados
n/a · n/aReferências
https://access.redhat.com/errata/RHSA-2020:0566https://access.redhat.com/errata/RHSA-2020:0578https://access.redhat.com/errata/RHSA-2020:0580https://access.redhat.com/errata/RHSA-2020:0681https://access.redhat.com/errata/RHSA-2020:0683https://access.redhat.com/errata/RHSA-2020:0694https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EMJBUZQGQ2Q7HXYCQVRLU7OXNC7CAWWU/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYDXD7EE4YAEVSTNIFZKNVPRVJX5ZOG3/https://pillow.readthedocs.io/en/latest/releasenotes/6.2.0.htmlhttps://usn.ubuntu.com/4272-1/https://www.debian.org/security/2020/dsa-4631