VDB

CNVD-2021-14763

CNVD-2021-14763 PUBLISHED

Record from circl · Published March 3, 2021

Python Imaging Library (PIL)是Python编程语言的免费库,支持打开、操作和保存多种图像文件格式。Pillow是一个PIL分支。 Pillow 8.1.1之前版本存在拒绝服务漏洞。该漏洞源于未针对ICNS容器正确检查所包含图像的报告大小。攻击者可通过尝试分配非常大的内存利用该漏洞导致拒绝服务。

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CNVD-2021-14763
vulnetix vdb fixes CNVD-2021-14763

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CNVD-2021-14763/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›