CVE-2021-25292
published 2021-03-19CVE-2021-25292: An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic…
PriorityP428medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
1.64%
73.6th percentile
An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | pillow | < pillow 8.1.1-1 (bookworm) | pillow 8.1.1-1 (bookworm) |
| python | pillow | < 8.1.1 | 8.1.1 |
| python | pillow | >= 0 < 8.1.1-1 | 8.1.1-1 |
| python | pillow | >= 0 < 8.1.1-1 | 8.1.1-1 |
| python | pillow | >= 0 < 8.1.1-1 | 8.1.1-1 |
| python | pillow | >= 0 < 8.1.1-1 | 8.1.1-1 |
| python | pillow | >= 0 < 3.1.2-0ubuntu1.6 | 3.1.2-0ubuntu1.6 |
| python | pillow | >= 0 < 5.1.0-1ubuntu0.5 | 5.1.0-1ubuntu0.5 |
| python | pillow | >= 0 < 7.0.0-4ubuntu0.3 | 7.0.0-4ubuntu0.3 |
| python | pillow | >= 5.1.0 < 8.1.1 | 8.1.1 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv9.8CRITICAL
vendor_ubuntu9.8CRITICAL
vendor_debian6.5MEDIUM
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Regular Expression Denial of Service (ReDoS) in Pillow
ghsa·2021-03-29
CVE-2021-25292 [MEDIUM] CWE-400 Regular Expression Denial of Service (ReDoS) in Pillow
Regular Expression Denial of Service (ReDoS) in Pillow
An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.
OSV
Regular Expression Denial of Service (ReDoS) in Pillow
osv·2021-03-29
CVE-2021-25292 [MEDIUM] Regular Expression Denial of Service (ReDoS) in Pillow
Regular Expression Denial of Service (ReDoS) in Pillow
An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.
OSV
CVE-2021-25292: An issue was discovered in Pillow before 8
osv·2021-03-19·CVSS 6.5
CVE-2021-25292 [MEDIUM] CVE-2021-25292: An issue was discovered in Pillow before 8
An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.
OSV
pillow vulnerabilities
osv·2021-03-11·CVSS 9.8
CVE-2021-25289 [CRITICAL] pillow vulnerabilities
pillow vulnerabilities
It was discovered that Pillow incorrectly handled certain Tiff image files.
If a user or automated system were tricked into opening a specially-crafted
Tiff file, a remote attacker could cause Pillow to crash, resulting in a
denial of service, or possibly execute arbitrary code. This issue only
affected Ubuntu 20.04 LTS and Ubuntu 20.10. (CVE-2021-25289,
CVE-2021-25291)
It was discovered that Pillow incorrectly handled certain Tiff image files.
If a user or automated system were tricked into opening a specially-crafted
Tiff file, a remote attacker could cause Pillow to crash, resulting in a
denial of service, or possibly execute arbitrary code. (CVE-2021-25290)
It was discovered that Pillow incorrectly handled certain PDF files. If a
user or automated system were
Ubuntu
Pillow vulnerabilities
vendor_ubuntu·2021-03-11·CVSS 9.8
CVE-2021-27922 [CRITICAL] Pillow vulnerabilities
Title: Pillow vulnerabilities
Summary: Several security issues were fixed in Pillow.
It was discovered that Pillow incorrectly handled certain Tiff image files.
If a user or automated system were tricked into opening a specially-crafted
Tiff file, a remote attacker could cause Pillow to crash, resulting in a
denial of service, or possibly execute arbitrary code. This issue only
affected Ubuntu 20.04 LTS and Ubuntu 20.10. (CVE-2021-25289,
CVE-2021-25291)
It was discovered that Pillow incorrectly handled certain Tiff image files.
If a user or automated system were tricked into opening a specially-crafted
Tiff file, a remote attacker could cause Pillow to crash, resulting in a
denial of service, or possibly execute arbitrary code. (CVE-2021-25290)
It was discovered that Pillow incorrectly
Red Hat
python-pillow: Regular expression DoS in PDF format parser
vendor_redhat·2021-02-28·CVSS 6.5
CVE-2021-25292 [MEDIUM] CWE-20 python-pillow: Regular expression DoS in PDF format parser
python-pillow: Regular expression DoS in PDF format parser
An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.
A flaw was found in python-pillow. The PDF parser has a catastrophic backtracking regex that could be used as a DOS attack.
Mitigation: Disable the invoice generation feature to mitigate this vulnerability in Red Hat Quay.
Package: python-pillow (Red Hat Enterprise Linux 7) - Out of support scope
Package: python-pillow (Red Hat Enterprise Linux 9) - Affected
Debian
CVE-2021-25292: pillow - An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular ...
vendor_debian·2021·CVSS 6.5
CVE-2021-25292 [MEDIUM] CVE-2021-25292: pillow - An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular ...
An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.
Scope: local
bookworm: resolved (fixed in 8.1.1-1)
bullseye: resolved (fixed in 8.1.1-1)
forky: resolved (fixed in 8.1.1-1)
sid: resolved (fixed in 8.1.1-1)
trixie: resolved (fixed in 8.1.1-1)
No detection rules found.
No public exploits indexed.
Unit42
File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help
blogs_unit42·2021-05-05
File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help
Threat Research Center
Threat Research
Cloud Cybersecurity Research
## File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help
Saeed Abbasi
Published: May 5, 2021
Cloud Cybersecurity Research
Threat Research
App-ID
File transfer
Insider threats
## Executive Summary
File transfers (i.e., upload and download) are vital for organizations and their employees’ productivity. For example, file uploads are essential for expense management platforms, content management systems (CMS), instant messaging and collaboration applications and services. Employees frequently transfer files to teammates, customers and partners, and it’s typically believed that the entire transferring process is safe. However, since the COVID-19 pandemic caused employees to transition t
Unit42
File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help
blogs_unit42·2021-05-05
File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help
## Executive Summary
File transfers (i.e., upload and download) are vital for organizations and their employees’ productivity. For example, file uploads are essential for expense management platforms, content management systems (CMS), instant messaging and collaboration applications and services. Employees frequently transfer files to teammates, customers and partners, and it’s typically believed that the entire transferring process is safe. However, since the COVID-19 pandemic caused employees to transition to remote workspaces, it has become critical to reduce attack vectors for malicious actors by applying precise measures to guarantee an organization’s security for file transfers.
Cyberthreats involving malware begin with delivering specific malicious code to the victims. Generally,
2021-03-19
Published