PT-2020-5163 · Pillow+3 · Pillow+3
Radarhere
·
Published
2020-01-03
·
Updated
2024-03-06
·
CVE-2020-5312
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Pillow versions prior to 6.2.2
Description
The issue is related to a buffer overflow in the PCX P mode of the Pillow library when encoding images. This could allow a remote attacker to cause a denial of service.
Recommendations
For versions prior to 6.2.2, update to version 6.2.2 or later to resolve the issue.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Centos
Pillow
Red Hat
Ubuntu