PT-2016-3211 · Pillow · Pillow

Publicado 2016-02-04 · Atualizado 2020-05-06 · CVE-2016-4009

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 3.1.1

Description The issue is caused by an integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c, which can be exploited by remote attackers via negative values of the new size, triggering a heap-based buffer overflow. This can potentially impact the confidentiality, integrity, and availability of data.

Recommendations For Pillow versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ImagingResampleHorizontal function to minimize the risk of exploitation. Avoid using negative values for the new size in the affected function until the issue is resolved.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2017-02504

CVE-2016-4009

GHSA-HVR8-466P-75RH

PYSEC-2016-7

SUSE-SU-2019:2334-1

SUSE-SU-2020:1194-1

Produtos afetados

Pillow

Referências · 26

• https://github.com/python-pillow/Pillow · Nota
• https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst · Aviso do Fabricante
• https://github.com/python-pillow/Pillow/commit/4e0d9b0b9740d258ade40cce248c93777362ac1e · Correção
• https://github.com/python-pillow/Pillow/pull/1714 · Correção
• https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2016-7.yaml · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-4009 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-4009 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-02504 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-hvr8-466p-75rh · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2020:1194-1 · Aviso do Fabricante
• https://bugzilla.suse.com/967970 · Nota
• https://security.gentoo.org/glsa/201612-52 · Aviso do Fabricante
• https://osv.dev/vulnerability/PYSEC-2016-7 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2016-4009 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2019/suse-su-20192334-1 · Nota