WID-SEC-W-2024-0426

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Python: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2016-09-15

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Python ausnutzen, um einen Denial of Service Angriff durchzuführen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2016-2533USmedium6.5—
Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial…
CVE-2016-0775USmedium6.5—
Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI fil…
CVE-2014-3589USmedium5.0—
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan