Pillow Vulnerabilidad

Cronología

Versión

8.0	17
8.1	14
6.2.0	8
6.2.1	8
7.0	4

Contramedidas

Official Fix	47
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	2

Explotabilidad

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	49

Vector de acceso

Not Defined	0
Physical	0
Local	9
Adjacent	28
Network	12

Autenticación

Not Defined	0
High	0
Low	28
None	21

La interacción del usuario

Not Defined	0
Required	15
None	34

C3BM Index

El año pasado

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	7
≤5	4
≤6	22
≤7	7
≤8	8
≤9	0
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	7
≤5	4
≤6	23
≤7	7
≤8	7
≤9	0
≤10	1

VulDB

≤1	0
≤2	0
≤3	0
≤4	19
≤5	1
≤6	21
≤7	6
≤8	1
≤9	0
≤10	1

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	7
≤7	3
≤8	14
≤9	6
≤10	3

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	18
<2k	15
<5k	16
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	49
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

Affected Versions (28): 2.3, 2.3.1, 2.5, 2.5.1, 2.5.2, 2.6, 2.6.1, 3.0, 3.1, 3.1.1, 3.3, 3.3.1, 6.0, 6.1, 6.2, 6.2.1, 6.2.2, 7.0, 8.0, 8.1, 8.3, 8.3.1, 9.0, 9.1, 9.2, 10.0, 10.1, 10.2

Tipo de software: Programming Language Software

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2024-04-02	5.5	5.3	python-pillow _imagingcms.c desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2024-28219
2024-01-20	6.8	6.7	Pillow PIL.ImageMath.eval escalada de privilegios	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-50447
2023-11-03	5.5	5.4	Pillow truetype in ImageFont denegación de servicio	$0-$5k	$0-$5k	Not Defined	Official Fix	0.06	CVE-2023-44271
2022-11-14	5.5	5.4	Pillow denegación de servicio	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-45199
2022-11-14	5.5	5.4	Pillow GIF Data denegación de servicio	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-45198
2022-05-25	5.5	5.3	Pillow TGA Image File TgaRleDecode.c desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-30595
2022-03-28	4.6	4.4	Pillow escalada de privilegios	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-24303
2022-01-10	5.5	5.3	Pillow path.c path_getbbox desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-22816
2022-01-10	5.5	5.3	Pillow path.c path_getbbox Privilege Escalation	$0-$5k	Calculador	Not Defined	Official Fix	0.00	CVE-2022-22815
2022-01-10	3.5	3.4	Pillow PIL.ImageMath.eval divulgación de información	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2022-22817

39 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 39 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!