Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
References
Link | Resource |
---|---|
https://bugs.gentoo.org/878769 | Issue Tracking Patch Third Party Advisory |
https://github.com/python-pillow/Pillow/commit/2444cddab2f83f28687c7c20871574acbb6dbcf3 | Patch Third Party Advisory |
https://github.com/python-pillow/Pillow/pull/6700 | Patch Third Party Advisory |
https://github.com/python-pillow/Pillow/releases/tag/9.3.0 | Release Notes Third Party Advisory |
https://security.gentoo.org/glsa/202211-10 | Third Party Advisory |
Configurations
History
10 Jan 2023, 20:11
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://bugs.gentoo.org/878769 - Issue Tracking, Patch, Third Party Advisory | |
References | (GENTOO) https://security.gentoo.org/glsa/202211-10 - Third Party Advisory |
22 Nov 2022, 06:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
16 Nov 2022, 16:06
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://github.com/python-pillow/Pillow/commit/2444cddab2f83f28687c7c20871574acbb6dbcf3 - Patch, Third Party Advisory | |
References | (MISC) https://bugs.gentoo.org/878769 - Third Party Advisory | |
References | (MISC) https://github.com/python-pillow/Pillow/releases/tag/9.3.0 - Release Notes, Third Party Advisory | |
References | (MISC) https://github.com/python-pillow/Pillow/pull/6700 - Patch, Third Party Advisory | |
CWE | CWE-400 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
First Time |
Python
Python pillow |
|
CPE | cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:* |
14 Nov 2022, 07:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-11-14 07:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-45199
Mitre link : CVE-2022-45199
CVE.ORG link : CVE-2022-45199
JSON object : View
Products Affected
python
- pillow
CWE
CWE-400
Uncontrolled Resource Consumption