Known vulnerabilities in python3-pil (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
python3-pil (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:python3-pil_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
24
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
1.1.7+2.0.0-1.1ubuntu1
2.2.1-1
2.2.1-1ubuntu1
2.2.1-1ubuntu2
2.2.1-2ubuntu1
2.2.1-3ubuntu1
2.2.1-3ubuntu2
2.2.1-3ubuntu3
2.2.1-3ubuntu4
2.2.1-3ubuntu5
2.2.1-3ubuntu6
2.3.0-1ubuntu1
2.3.0-1ubuntu2
2.3.0-1ubuntu3.2
2.3.0-1ubuntu3.3
9.0.1-1ubuntu0.5
9.0.1-1ubuntu0.4
11.3.0-1ubuntu1
7.0.0-4ubuntu0.9
11.1.0-5build1
10.4.0-1ubuntu1
9.0.1-1ubuntu0.3
7.0.0-4ubuntu0.1
10.2.0-1ubuntu1
7.0.0-4ubuntu0.8
9.0.1-1ubuntu0.2
10.0.0-1ubuntu0.1
7.0.0-4ubuntu0.7
9.0.1-1ubuntu0.1
7.0.0-4ubuntu0.6
5.1.0-1ubuntu0.8
3.1.20ubuntu1.6+esm1
7.0.0-4ubuntu0.5
8.1.2-1ubuntu0.2
8.1.2+dfsg-0.3ubuntu0.1
7.0.0-4ubuntu0.4
7.2.0-1ubuntu0.3
8.1.2-1ubuntu0.1
7.0.0-4ubuntu0.3
7.2.0-1ubuntu0.2
2.3.0-1ubuntu3.4+esm2
7.0.0-4ubuntu0.2
7.2.0-1ubuntu0.1
5.1.0-1ubuntu0.7
5.1.0-1ubuntu0.6
5.1.0-1ubuntu0.5
3.1.2-0ubuntu1.6
5.1.0-1ubuntu0.4
3.1.2-0ubuntu1.5
5.1.0-1ubuntu0.3
3.1.2-0ubuntu1.4
7.0.0-4build1
3.1.2-0ubuntu1
2.3.0-1ubuntu3
2.3.0-1ubuntu3.4
6.1.0-1ubuntu0.2
5.1.0-1ubuntu0.2
3.1.2-0ubuntu1.3
6.1.0-1
5.2.0-2
5.1.0-1
3.1.2-0ubuntu1.1
5.4.1-1
Vulnerabilities (24)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU88063 - Memory corruption CVE-2024-28219 |
CWE-119 | Medium | 10.2.0-1ubuntu1 | 03.04.2024 |
SB2024040318 SB2024040320 SB2024040844 and 28 more |
||
| #VU85743 - Improper Control of Generation of Code ('Code Injection') CVE-2023-50447 |
CWE-94 | High | 7.0.0-4ubuntu0.8, 9.0.1-1ubuntu0.2, 10.0.0-1ubuntu0.1 | 24.01.2024 |
SB2024012413 SB2024012417 SB2024012465 and 34 more |
||
| #VU83261 - Resource exhaustion CVE-2023-44271 |
CWE-400 | Medium | 7.0.0-4ubuntu0.8, 9.0.1-1ubuntu0.2, 10.0.0-1ubuntu0.1 | 18.11.2023 |
SB2023111809 SB2023111810 SB2023111811 and 25 more |
||
| #VU69498 - Resource Management Errors CVE-2022-45198 |
CWE-399 | Medium | 7.0.0-4ubuntu0.7, 9.0.1-1ubuntu0.1 | 22.11.2022 |
SB2022112230 SB2022112234 SB2022121360 and 3 more |
||
| #VU69497 - Improper input validation CVE-2022-24303 |
CWE-20 | Medium | 7.0.0-4ubuntu0.7, 9.0.1-1ubuntu0.1 | 22.11.2022 |
SB2022112229 SB2022112234 SB2022121360 and 6 more |
||
| #VU68608 - Incorrect Regular Expression CVE-2021-23437 |
CWE-185 | Medium | 3.1.20ubuntu1.6+esm1, 5.1.0-1ubuntu0.7, 5.1.0-1ubuntu0.8, 7.0.0-4ubuntu0.5, 7.0.0-4ubuntu0.6, 8.1.2+dfsg-0.3ubuntu0.1, 8.1.2-1ubuntu0.2 | 24.10.2022 |
SB2021090323 SB2022102434 SB2022112234 and 8 more |
||
| #VU68607 - Memory corruption CVE-2021-34552 |
CWE-119 | High | 3.1.20ubuntu1.6+esm1, 5.1.0-1ubuntu0.7, 5.1.0-1ubuntu0.8, 7.0.0-4ubuntu0.5, 7.0.0-4ubuntu0.6, 8.1.2+dfsg-0.3ubuntu0.1, 8.1.2-1ubuntu0.2 | 24.10.2022 |
SB2022102431 SB2022102434 SB2022112234 and 9 more |
||
| #VU60003 - Exposed Dangerous Method or Function CVE-2022-22817 |
CWE-749 | High | 3.1.20ubuntu1.6+esm1, 5.1.0-1ubuntu0.7, 5.1.0-1ubuntu0.8, 7.0.0-4ubuntu0.5, 7.0.0-4ubuntu0.6, 8.1.2+dfsg-0.3ubuntu0.1, 8.1.2-1ubuntu0.2 | 25.01.2022 |
SB2022012523 SB2022012526 SB2022022226 and 26 more |
||
| #VU60002 - Out-of-bounds read CVE-2022-22816 |
CWE-125 | Medium | 3.1.20ubuntu1.6+esm1, 5.1.0-1ubuntu0.7, 5.1.0-1ubuntu0.8, 7.0.0-4ubuntu0.5, 7.0.0-4ubuntu0.6, 8.1.2+dfsg-0.3ubuntu0.1, 8.1.2-1ubuntu0.2 | 25.01.2022 |
SB2022012523 SB2022012526 SB2022022226 and 33 more |
||
| #VU60001 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-22815 |
CWE-22 | Medium | 3.1.20ubuntu1.6+esm1, 5.1.0-1ubuntu0.7, 5.1.0-1ubuntu0.8, 7.0.0-4ubuntu0.5, 7.0.0-4ubuntu0.6, 8.1.2+dfsg-0.3ubuntu0.1, 8.1.2-1ubuntu0.2 | 25.01.2022 |
SB2022012523 SB2022012526 SB2022102434 and 24 more |
||
| #VU52192 - Resource Management Errors CVE-2021-28678 |
CWE-399 | Medium | 5.1.0-1ubuntu0.6, 7.0.0-4ubuntu0.4, 7.2.0-1ubuntu0.3, 8.1.2-1ubuntu0.1 | 13.04.2021 |
SB2021041363 SB2021051947 SB2024051101 and 3 more |
||
| #VU52191 - Improper input validation CVE-2021-28677 |
CWE-20 | Medium | 5.1.0-1ubuntu0.6, 7.0.0-4ubuntu0.4, 7.2.0-1ubuntu0.3, 8.1.2-1ubuntu0.1 | 13.04.2021 |
SB2021041363 SB2021051947 SB2024051101 and 3 more |
||
| #VU52190 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-28676 |
CWE-835 | Medium | 5.1.0-1ubuntu0.6, 7.0.0-4ubuntu0.4, 7.2.0-1ubuntu0.3, 8.1.2-1ubuntu0.1 | 13.04.2021 |
SB2021041363 SB2021051947 SB2024051101 and 3 more |
||
| #VU52189 - Resource Management Errors CVE-2021-28675 |
CWE-399 | Medium | 5.1.0-1ubuntu0.6, 7.0.0-4ubuntu0.4, 7.2.0-1ubuntu0.3, 8.1.2-1ubuntu0.1 | 13.04.2021 |
SB2021041363 SB2021051947 SB2024051101 and 3 more |
||
| #VU52188 - Out-of-bounds read CVE-2021-25288 |
CWE-125 | Medium | 5.1.0-1ubuntu0.6, 7.0.0-4ubuntu0.4, 7.2.0-1ubuntu0.3, 8.1.2-1ubuntu0.1 | 13.04.2021 |
SB2021041363 SB2021051947 SB2024051101 and 2 more |
||
| #VU52187 - Out-of-bounds read CVE-2021-25287 |
CWE-125 | Medium | 5.1.0-1ubuntu0.6, 7.0.0-4ubuntu0.4, 7.2.0-1ubuntu0.3, 8.1.2-1ubuntu0.1 | 13.04.2021 |
SB2021041363 SB2021051947 SB2024051101 and 2 more |
||
| #VU49385 - Memory corruption CVE-2020-35655 |
CWE-119 | High | 3.1.2-0ubuntu1.5, 5.1.0-1ubuntu0.4, 7.0.0-4ubuntu0.2, 7.2.0-1ubuntu0.1 | 11.01.2021 |
SB2021011110 SB2021011111 SB2021011252 and 4 more |
||
| #VU49384 - Out-of-bounds write CVE-2020-35654 |
CWE-787 | High | 3.1.2-0ubuntu1.5, 5.1.0-1ubuntu0.4, 7.0.0-4ubuntu0.2, 7.2.0-1ubuntu0.1 | 11.01.2021 |
SB2021011110 SB2021011111 SB2021011252 and 4 more |
||
| #VU49383 - Out-of-bounds read CVE-2020-35653 |
CWE-125 | Low | 2.3.0-1ubuntu3.4+esm2, 3.1.2-0ubuntu1.5, 5.1.0-1ubuntu0.4, 7.0.0-4ubuntu0.2, 7.2.0-1ubuntu0.1 | 11.01.2021 |
SB2021011110 SB2021011111 SB2021011252 and 6 more |
||
| #VU29437 - Out-of-bounds read CVE-2020-11538 |
CWE-125 | Medium | 3.1.2-0ubuntu1.4, 5.1.0-1ubuntu0.3, 7.0.0-4ubuntu0.1 | 01.07.2020 |
SB2020070118 SB2020073034 SB2020080502 and 6 more |
Showing elements 1 - 20 out of 24