PT-2016-3211 · Pillow · Pillow

Published 2016-02-04 · Updated 2020-05-06 · CVE-2016-4009

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 3.1.1

Description The issue is caused by an integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c, which can be exploited by remote attackers via negative values of the new size, triggering a heap-based buffer overflow. This can potentially impact the confidentiality, integrity, and availability of data.

Recommendations For Pillow versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ImagingResampleHorizontal function to minimize the risk of exploitation. Avoid using negative values for the new size in the affected function until the issue is resolved.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2017-02504

CVE-2016-4009

GHSA-HVR8-466P-75RH

PYSEC-2016-7

SUSE-SU-2019:2334-1

SUSE-SU-2020:1194-1

Affected Products

Pillow

References · 26

• https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst · Vendor Advisory
• https://github.com/python-pillow/Pillow/commit/4e0d9b0b9740d258ade40cce248c93777362ac1e · Patch
• https://github.com/python-pillow/Pillow/pull/1714 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2016-4009 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-4009 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02504 · Security Note
• https://osv.dev/vulnerability/GHSA-hvr8-466p-75rh · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1194-1 · Vendor Advisory
• https://security.gentoo.org/glsa/201612-52 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2016-7 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-4009 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2334-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-4009 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4009 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-4009 · Security Note