What is GHSA-j6f7-g425-4gmx?

GHSA-j6f7-g425-4gmx is a security advisory published by GitHub Security Advisories with High severity. Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin

Which CVE IDs does GHSA-j6f7-g425-4gmx cover?

GHSA-j6f7-g425-4gmx covers the following CVE IDs: CVE-2014-3598. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j6f7-g425-4gmx?

GHSA-j6f7-g425-4gmx has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-j6f7-g425-4gmx?

GHSA-j6f7-g425-4gmx affects 1 product, including: pip/pillow:\u003c 2.5.3.

GHSA-j6f7-g425-4gmxHighCVSS 7.5

Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

October 9, 2024

🔗 CVE IDs covered (1)

CVE-2014-3598 →

📋 Description

The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.

🎯 Affected products1

pip/pillow:< 2.5.3

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2014-3598
https://pypi.python.org/pypi/Pillow/2.5.3
http://lists.opensuse.org/opensuse-updates/2015-04/msg00056.html
https://github.com/python-pillow/Pillow/commit/347a1d8d956f9e64af4463ee25311b60cdd5657d
https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2015-15.yaml
https://github.com/advisories/GHSA-j6f7-g425-4gmx