An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image.
References
Configurations
History
21 Nov 2024, 04:31
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/errata/RHSA-2020:0566 - | |
| References | () https://access.redhat.com/errata/RHSA-2020:0578 - | |
| References | () https://access.redhat.com/errata/RHSA-2020:0580 - | |
| References | () https://access.redhat.com/errata/RHSA-2020:0681 - | |
| References | () https://access.redhat.com/errata/RHSA-2020:0683 - | |
| References | () https://access.redhat.com/errata/RHSA-2020:0694 - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EMJBUZQGQ2Q7HXYCQVRLU7OXNC7CAWWU/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYDXD7EE4YAEVSTNIFZKNVPRVJX5ZOG3/ - | |
| References | () https://pillow.readthedocs.io/en/latest/releasenotes/6.2.0.html - Release Notes, Vendor Advisory | |
| References | () https://usn.ubuntu.com/4272-1/ - | |
| References | () https://www.debian.org/security/2020/dsa-4631 - |
07 Nov 2023, 03:06
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
Information
Published : 2019-10-04 22:15
Updated : 2024-11-21 04:31
NVD link : CVE-2019-16865
Mitre link : CVE-2019-16865
CVE.ORG link : CVE-2019-16865
JSON object : View
Products Affected
fedoraproject
- fedora
python
- pillow
CWE
CWE-770
Allocation of Resources Without Limits or Throttling