Lucene search
GoogleOSV:BIT-PILLOW-2020-10177HistoryMar 06, 2024 - 11:07 a.m.
BIT-pillow-2020-10177
2024-03-0611:07:28
Google
osv.dev
3
pillow vulnerability out-of-bounds
Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.
References
github.com/python-pillow/Pillow/commits/master/src/libImaging
github.com/python-pillow/Pillow/pull/4503
github.com/python-pillow/Pillow/pull/4538
lists.debian.org/debian-lts-announce/2020/08/msg00012.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEBCPE4F2VHTIT6EZA2YZQZLPVDEBJGD/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HOKHNWV2VS5GESY7IBD237E7C6T3I427/
pillow.readthedocs.io/en/stable/releasenotes/7.1.0.html
usn.ubuntu.com/4430-1/
usn.ubuntu.com/4430-2/
Related
osv
osv
CVE-2020-10177
2020-06-25 19:15:12
PYSEC-2020-76
2020-06-25 19:15:00
pillow - security update
2020-08-08 00:00:00
cve
cve
CVE-2020-10177
2020-06-25 19:15:00
ibm
ibm
debian
debian
[SECURITY] [DLA 2317-1] pillow security update
2020-08-08 18:03:44
cvelist
cvelist
CVE-2020-10177
2020-06-25 18:33:15
nessus
nessus
Debian DLA-2317-1 : pillow security update
2020-08-10 00:00:00
EulerOS Virtualization 3.0.6.6 : python-pillow (EulerOS-SA-2020-2473)
2020-11-06 00:00:00
EulerOS 2.0 SP5 : python-pillow (EulerOS-SA-2020-2266)
2020-10-30 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-24 02:52:49
openvas
openvas
Debian: Security Advisory (DLA-2317-1)
2020-08-17 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-2473)
2020-11-05 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-1966)
2020-09-08 00:00:00
prion
prion
Out-of-bounds
2020-06-25 19:15:00
redhatcve
redhatcve
CVE-2020-10177
2020-07-01 11:52:45
github
github
Out-of-bounds reads in Pillow
2020-07-27 21:52:43
debiancve
debiancve
CVE-2020-10177
2020-06-25 19:15:00
ubuntucve
ubuntucve
CVE-2020-10177
2020-06-25 00:00:00
ubuntu
ubuntu
Pillow vulnerabilities
2021-01-20 00:00:00
Pillow vulnerabilities
2020-07-22 00:00:00
Pillow vulnerabilities
2020-07-23 00:00:00
mageia
mageia
Updated python-pillow packages fix security vulnerabilities
2020-11-23 22:51:37
fedora
fedora
[SECURITY] Fedora 31 Update: python-pillow-6.2.2-3.fc31
2020-07-10 01:02:19
[SECURITY] Fedora 32 Update: python-pillow-7.0.0-4.fc32
2020-07-04 01:14:29
redhat
redhat
(RHSA-2021:0420) Moderate: Red Hat Quay v3.4.0 security update
2021-02-04 16:10:17
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
42.4%
Related for OSV:BIT-PILLOW-2020-10177