Linux Distros Unpatched Vulnerability : CVE-2020-10994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file. CVE-2020-10994 Note that Nessus relies on th...

RHEL 8 : python-pillow (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-pillow: multiple out-of-bounds reads via a crafted JP2 file CVE-2020-10994 Note that Nessus has not tested f...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-1729)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-1570)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated python-pillow packages fix security vulnerabilities

Pillow before 6.2.3 and 7.x before 7.0.1 has multiple out-of-bounds reads in libImaging/FliDecode.c CVE-2020-10177. In libImaging/PcxDecode.c in Pillow before 6.2.3 and 7.x before 7.0.1, an out-of-bounds read can occur when reading PCX files where state-shuffle is instructed to read beyond...

al-for-design (0.0.1), autogluon (>=0.0.5, <=0.1.0b20210209) +48 more potentially affected by CVE-2020-10994 via pillow (6.2.1)

pillow PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - al-for-design 0.0.1 - autogluon =0.0.5, =0.0.15b20201014, =0.0.15b20201024, =0.0.16b20210114, =0.0.15b20201024, =0.0.121, =0.0.1, =0.0.1, =0.0.1,...

adversarial-robustness-toolbox (1.2.0), aristote-malo (1.9.5) +79 more potentially affected by CVE-2020-10994 via pillow (7.0.0)

pillow PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adversarial-robustness-toolbox 1.2.0 - aristote-malo 1.9.5 - auto-annotate =1.0.0, =1.0.2, =0.1.0.dev31, =1.0.1, =0.2.3, =0.0.1.25, =0.2.1, =0.0.2,...

9gag-scraper (>=0.0.6, <=0.0.7), agora-community-sdk (>=0.1.7, <=0.1.10) +141 more potentially affected by CVE-2020-10994 via pillow (6.2.2)

pillow PYPI version 6.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 9gag-scraper =0.0.6, =0.1.7, =0.0.1.dev1, =0.1.0, =0.1.0, =1.0.0, =0.26.0.dev2, =0.0.1, =20.1.1, =2.0.0, =3.0.2, =0.16.0, =0.18.2 - colornet 0.2.0 a...

aug (0.1.0), chromewhip (>=0.3.0, <=0.3.4) +85 more potentially affected by CVE-2020-10994 via pillow (6.0.0)

pillow PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aug 0.1.0 - chromewhip =0.3.0, =1.0.2, =2.3.0.18070322, =2.3.0.18072813, =2.3.0.18073020, =0.0.1, =3.7.0a4, =0.3.7, =0.0.1, =2.3.0.18070322,...

blockies (0.0.2), cdt-test (>=0.1.0, <=0.1.7) +33 more potentially affected by CVE-2020-10994 via pillow (6.1.0)

pillow PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - blockies 0.0.2 - cdt-test =0.1.0, =1.1.0, =0.3.0, =0.1.0, =0.1.3, =0.1.2, =0.0.2, =1.1.0, =0.9.939.507, =0.9.939.518 - happy-tree-gallery 0.8.0 and...

banner-ad-toolkit (>=0.3.1, <=0.3.2), bcipy (>=1.1.1, <=1.2.0) +64 more potentially affected by CVE-2020-10994 via pillow (4.3.0)

pillow PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - banner-ad-toolkit =0.3.1, =1.1.1, =2.2.0, =1.4.9, =2.0.0, =0.1.0a0, =1.1.0, =0.23.0, =0.2.6, =0.6.0, =2.3.0.18073018, =2.3.6.19012721 and more Sourc...

2xh-leet (0.1.2), actfw-core (>=2.0.0a0, <=2.1.1) +92 more potentially affected by CVE-2020-10994 via pillow (5.4.1)

pillow PYPI version 5.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 2xh-leet 0.1.2 - actfw-core =2.0.0a0, =0.1.0a7, =0.1.1, =2.0.0a0, =0.57.1b6141, =2.0.1, =0.4.0, =0.4.0, =0.0.2, =4.3.0, =2.17.0, =0.5.0, =2.0.0,...

aceui (>=1.0.2, <=1.0.21), biseau (>=0.0.1, <=0.0.18) +23 more potentially affected by CVE-2020-10994 via pillow (5.3.0)

pillow PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aceui =1.0.2, =0.0.1, =0.1.0, =0.1.1, =0.1.0, =0.3.0, =0.2.0, =1.0.0a1, =0.7.0a1, =1.0.8, =1.0.10 - nider 0.5.0 - optimuspyspark 2.1.1 and more Sour...

bedrock (0.1.0.dev10), dbcollection (>=0.2.2, <=0.2.6) +19 more potentially affected by CVE-2020-10994 via pillow (5.1.0)

pillow PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - bedrock 0.1.0.dev10 - dbcollection =0.2.2, =0.0.6, =1.0.0, =0.0.0a1, =0.1.0, =4.0.0, =4.0.0, =4.0.0, =4.1.1 and more Source cves: CVE-2020-10994...

dcicsnovault (>=2.0.0b0, <=2.0.0b11), shot-detector (0.0.4.dev41) +2 more potentially affected by CVE-2020-10994 via pillow (3.3.0)

pillow PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =2.0.0b0, =0.2.3, =0.0.1, =0.1.0 Source cves: CVE-2020-10994 Source advisory: OSV:GHSA-VJ42-XQ3R-HR3R...

django-leaflet-storage (0.8.0b0), heatmappy (>=0.2.0, <=0.2.6) +3 more potentially affected by CVE-2020-10994 via pillow (3.0.0)

pillow PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-leaflet-storage 0.8.0b0 - heatmappy =0.2.0, =0.1.4, =0.1.14 - swmmio 0.2.1 - wsy-captcha 1.0.0 Source cves: CVE-2020-10994 Source advisory:...

ayabinterface (0.0.8), hjun (0.2.2) +3 more potentially affected by CVE-2020-10994 via pillow (3.2.0)

pillow PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - ayabinterface 0.0.8 - hjun 0.2.2 - kniteditor =0.0.8, =0.1.17, =0.1.19 - thumpy 0.3.2 Source cves: CVE-2020-10994 Source advisory:...

planadversity (1.0.2) potentially affected by CVE-2020-10994 via pillow (2.0.0)

pillow PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - planadversity 1.0.2 Source cves: CVE-2020-10994 Source advisory: OSV:GHSA-VJ42-XQ3R-HR3R...

django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) potentially affected by CVE-2020-10994 via pillow (2.4.0)

pillow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-badgify-lab 0.1.5 - django-oscar =1.0.0, =1.0.2 Source cves: CVE-2020-10994 Source advisory: OSV:GHSA-VJ42-XQ3R-HR3R...

entweet (2.0.0), worldengine (0.18.0) potentially affected by CVE-2020-10994 via pillow (2.8.2)

pillow PYPI version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - entweet 2.0.0 - worldengine 0.18.0 Source cves: CVE-2020-10994 Source advisory: OSV:GHSA-VJ42-XQ3R-HR3R...