CVE-2014-3598
published 2015-05-01CVE-2014-3598: The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
medium5CVSS 3.1
AVNACLAuNCNINAP
The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | pillow | < pillow 2.5.3-1 (bookworm) | pillow 2.5.3-1 (bookworm) |
| opensuse | opensuse | — | — |
| python | pillow | <= 2.5.2 | — |
| python | pillow | >= 0 < 2.5.3-1 | 2.5.3-1 |
| python | pillow | >= 0 < 2.5.3-1 | 2.5.3-1 |
| python | pillow | >= 0 < 2.5.3-1 | 2.5.3-1 |
| python | pillow | >= 0 < 2.5.3-1 | 2.5.3-1 |
| python | pillow | >= 0 < 2.5.3 | 2.5.3 |
CVSS provenance
nvd5.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM