python2-pillow

Link	package \| bugs open \| bugs closed \| Wiki \| GitHub \| web search
Description	Python Imaging Library (PIL) fork.
Version	6.2.1-3 [community]

Open

Group	Affected	Fixed	Severity	Status	Ticket
AVG-1439	6.2.1-3		Medium	Vulnerable

Issue	Group	Severity	Remote	Type	Description
CVE-2020-35655	AVG-1439	Low	No	Denial of service	In python-pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over- read when decoding crafted SGI RLE image files because offsets and length tables are...
CVE-2020-35654	AVG-1439	Medium	No	Arbitrary code execution	In python-pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts...
CVE-2020-35653	AVG-1439	Medium	No	Information disclosure	In python-pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for...

Issue

Group

Severity

Remote

Type

Description

CVE-2020-35655

AVG-1439

Low

Denial of service

In python-pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over- read when decoding crafted SGI RLE image files because offsets and length tables are...

CVE-2020-35654

AVG-1439

Medium

Arbitrary code execution

In python-pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts...

CVE-2020-35653

AVG-1439

Medium

Information disclosure

In python-pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for...