[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2020-5311":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":33,"references":39,"score":55,"epss_score":56,"epss_percentile":57,"is_kev":58,"cisa_kev_date_added":59,"cisa_kev_due_date":59,"cisa_ssvc":60,"attack_mappings":66,"exploits":73},253152,"CVE-2020-5311","EUVD-2020-0135","Buffer Copy without Checking Size of Input in Pillow\n\n`libImaging\u002FSgiRleDecode.c` in Pillow before 6.2.2 has an SGI buffer overflow.","2022-05-24T17:05:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":17,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",9.8,"NETWORK","CRITICAL","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","HIGH","NONE","LOW",true,[22],"CWE-120",[24,25,26,27,28,29,30,31,32],"cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","cpe:2.3:a:pillow:pillow:*:*:*:*:*:*:*:*","cpe:2.3:a:pillow:pillow:6.2.1:*:*:*:*:*:*:*",[34,35,36,37,38],"Canonical Ubuntu Linux","Debian Debian Linux","Fedoraproject Fedora","Python Pillow","Pillow Pillow",[40,41,42,43,44,45,46,47,48,49,50,51,52,53,54],"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2020:0566","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2020:0580","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa79b65c47c7dc6fe623aadf09aa6192fc54548f3","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F2MMU3WT2X64GS5WHDPKKC2WZA7UIIQ3A\u002F","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F3DUMIBUYGJRAVJCTFUWBRLVQKOUTVX5P\u002F","https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F6.2.2.html","https:\u002F\u002Fusn.ubuntu.com\u002F4272-1\u002F","https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2020\u002Fdsa-4631","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2020-5311","https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r7rm-8j6h-r933","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2020-82.yaml","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F2MMU3WT2X64GS5WHDPKKC2WZA7UIIQ3A","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F3DUMIBUYGJRAVJCTFUWBRLVQKOUTVX5P","https:\u002F\u002Fusn.ubuntu.com\u002F4272-1",0.69,0.04212,0.90911,false,null,{"timestamp":59,"automatable":61,"tech_impact":62,"exploitation":63,"cisa_decision":64,"cisa_remediation_timeline":65},"no","partial","none",{},"FSU",[67],{"name":68,"source":69,"tactics":70,"technique_id":72},"Exploit Public-Facing Application","attack_vector",[71],"initial-access","T1190",[]]