Skip to content

CVE-2014-3598 Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin

MediumCVSS 5.0 EPSS 2.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.

Affected products

ProductAffected versionsFixed in
pypi pillow(PyPI) < 2.5.3 2.5.3
pypi pillow(PyPI) = 1.0 No fix listed
pypi pillow(PyPI) = 1.1 No fix listed
pypi pillow(PyPI) = 1.2 No fix listed
pypi pillow(PyPI) = 1.3 No fix listed
pypi pillow(PyPI) = 1.4 No fix listed
pypi pillow(PyPI) = 1.5 No fix listed
pypi pillow(PyPI) = 1.6 No fix listed
pypi pillow(PyPI) = 1.7.0 No fix listed
pypi pillow(PyPI) = 1.7.1 No fix listed
pypi pillow(PyPI) = 1.7.2 No fix listed
pypi pillow(PyPI) = 1.7.3 No fix listed
pypi pillow(PyPI) = 1.7.4 No fix listed
pypi pillow(PyPI) = 1.7.5 No fix listed
pypi pillow(PyPI) = 1.7.6 No fix listed
pypi pillow(PyPI) = 1.7.7 No fix listed
pypi pillow(PyPI) = 1.7.8 No fix listed
pypi pillow(PyPI) = 2.0.0 No fix listed
pypi pillow(PyPI) = 2.1.0 No fix listed
pypi pillow(PyPI) = 2.2.0 No fix listed
pypi pillow(PyPI) = 2.2.1 No fix listed
pypi pillow(PyPI) = 2.2.2 No fix listed
pypi pillow(PyPI) = 2.3.0 No fix listed
pypi pillow(PyPI) = 2.3.1 No fix listed
pypi pillow(PyPI) = 2.3.2 No fix listed
Show 9 more
ProductAffected versionsFixed in
pypi pillow(PyPI) = 2.4.0 No fix listed
pypi pillow(PyPI) = 2.5.0 No fix listed
pypi pillow(PyPI) = 2.5.1 No fix listed
pypi pillow(PyPI) = 2.5.2 No fix listed
debian/pillow(Debian:12) < 2.5.3-1 2.5.3-1
debian/pillow(Debian:13) < 2.5.3-1 2.5.3-1
debian/pillow(Debian:14) < 2.5.3-1 2.5.3-1
opensuse = 13.2 No fix listed
python pillow <= 2.5.2 No fix listed

References