Known vulnerabilities in python-pillow (Red Hat package) - page 4
Vendor:
Red Hat Inc.
Software:
python-pillow (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:python-pillow_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
67
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.1.1-20.el8_6.1
5.1.1-20.el8_8.1
5.1.1-15.el8_4.2
12.3.0-1.el8pc
12.3.0-1.el9pc
5.1.1-23.el8_10
5.1.1-20.el8_6
5.1.1-20.el8_8
5.1.1-22.el8_10
12.2.0-1.el8pc
12.2.0-1.el9pc
12.1.1-1.el8pc
12.1.1-1.el9pc
10.3.0-1.el8pc
10.3.0-1.el9pc
5.1.1-21.el8_10
10.3.0-1.el9ap
5.1.1-20.el8
9.5.0-4.el8pc
10.0.1-1.el9ap
5.1.1-15.el8_4
5.1.1-15.el8_2
5.1.1-19.el8_6
5.1.1-18.el8_9.1
2.0.0-25.gitd1c6db8.el7_9
5.1.1-19.el8_8
2.0.0-24.gitd1c6db8.el7_9
5.1.1-16.el8
5.1.1-14.el8_4
5.1.1-14.el8_2
5.1.1-13.el8_1
5.1.1-18.el8_5
2.0.0-23.gitd1c6db8.el7_9
2.0.0-21.gitd1c6db8.el7
5.1.1-11.el8_0
5.1.1-11.el8_1
5.1.1-12.el8_2
2.0.0-20.gitd1c6db8.el7_7
5.1.1-10.el8_1
5.1.1-10.el8_0
Vulnerabilities (67)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU85743 - Improper Control of Generation of Code ('Code Injection') CVE-2023-50447 |
CWE-94 | High | 2.0.0-25.gitd1c6db8.el7_9, 5.1.1-15.el8_2, 5.1.1-15.el8_4, 5.1.1-18.el8_9.1, 5.1.1-19.el8_6, 5.1.1-19.el8_8, 10.3.0-1.el9ap | 24.01.2024 |
SB2024012413 SB2024012417 SB2024012465 and 34 more |
||
| #VU83261 - Resource exhaustion CVE-2023-44271 |
CWE-400 | Medium | 2.0.0-24.gitd1c6db8.el7_9, 5.1.1-20.el8 | 18.11.2023 |
SB2023111809 SB2023111810 SB2023111811 and 25 more |
||
| #VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40167 |
CWE-444 | Medium | 9.5.0-4.el8pc | 14.09.2023 |
SB2023091440 SB2023092933 SB2023101760 and 68 more |
||
| #VU60003 - Exposed Dangerous Method or Function CVE-2022-22817 |
CWE-749 | High | 2.0.0-23.gitd1c6db8.el7_9, 5.1.1-13.el8_1, 5.1.1-14.el8_2, 5.1.1-14.el8_4, 5.1.1-18.el8_5 | 25.01.2022 |
SB2022012523 SB2022012526 SB2022022226 and 26 more |
||
| #VU60002 - Out-of-bounds read CVE-2022-22816 |
CWE-125 | Medium | 2.0.0-23.gitd1c6db8.el7_9, 5.1.1-13.el8_1, 5.1.1-14.el8_2, 5.1.1-14.el8_4, 5.1.1-18.el8_5 | 25.01.2022 |
SB2022012523 SB2022012526 SB2022022226 and 33 more |
||
| #VU29437 - Out-of-bounds read CVE-2020-11538 |
CWE-125 | Medium | 5.1.1-11.el8_0, 5.1.1-11.el8_1, 5.1.1-12.el8_2 | 01.07.2020 |
SB2020070118 SB2020073034 SB2020080502 and 6 more |
||
| #VU23913 - Memory corruption CVE-2020-5313 |
CWE-119 | High | 2.0.0-21.gitd1c6db8.el7, 5.1.1-12.el8_2 | 03.01.2020 |
SB2020010305 SB2020020704 SB2020022302 and 10 more |
Showing elements 61 - 80 out of 67