Asymmetric denial of service In pillow
Description
Pillow Denial of Service vulnerability An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 pypi | 10.0.0 | ||
 debian 11 | 8.1.2+dfsg-0.3+deb11u2 | ||
debian 12 | 9.4.0-1.1+deb12u1 | ||
debian 13 | 10.0.0-1 | ||
debian 14 | 10.0.0-1 | ||
 rpm rhel7 | 0:2.0.0-24.gitd1c6db8.el7_9 | ||
rpm rhel8 | 0:5.1.1-20.el8 |
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1. 2. 3. 4.