MiracleLinux 7 : python-pillow-2.0.0-20.gitd1c6db8.el7 (AXSA:2020-4477:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-4477:01 advisory. python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c CVE-2020-5312 python-pillow: reading specially crafted...

CVE-2020-5312

creationtimestamp| type| source ---|---|--- 2024-03-19 11:11:38+00:00| seen| https://t.me/ctinow/211350...

K16213320: Python Pillow vulnerabilities CVE-2020-5312 and CVE-2020-5313

Security Advisory Description CVE-2020-5312 libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. CVE-2020-5313 libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow. Impact There is no impact; F5 products are not affected by this vulnerability. Securi...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.16.1.2)

The version of AOS installed on the remote host is prior to 5.16.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.16.1.2 advisory. - libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. CVE-2020-5312 - An issue was discovered i...

Mageia: Security Advisory (MGASA-2020-0088)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

al-for-design (0.0.1), aug (0.1.0) +188 more potentially affected by CVE-2020-5312 via pillow (>=6.0.0, <=6.2.1)

pillow PYPI version =6.0.0, =0.0.5, =0.0.15b20201014, =0.0.15b20201024, =0.0.16b20210114, =0.0.15b20201024, =0.0.121, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2, =0.2.0, =0.2.1 and more Source cves: CVE-2020-5312 Source advisory: OSV:GHSA-P49H-HJVM-JG3H...

al-for-design (0.0.1), aug (0.1.0) +188 more potentially affected by CVE-2020-5312 via pillow (>=6.0.0, <=6.2.1)

pillow PYPI version =6.0.0, =0.0.5, =0.0.15b20201014, =0.0.15b20201024, =0.0.16b20210114, =0.0.15b20201024, =0.0.121, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2, =0.2.0, =0.2.1 and more Source cves: CVE-2020-5312 Source advisory: GHSA-P49H-HJVM-JG3H...

2xh-leet (0.1.2), actfw-core (>=2.0.0a0, <=2.1.1) +92 more potentially affected by CVE-2020-5312 via pillow (5.4.1)

pillow PYPI version 5.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 2xh-leet 0.1.2 - actfw-core =2.0.0a0, =0.1.0a7, =0.1.1, =2.0.0a0, =0.57.1b6141, =2.0.1, =0.4.0, =0.4.0, =0.0.2, =4.3.0, =2.17.0, =0.5.0, =2.0.0,...

chromewhip (>=0.2.2, <=0.2.16), cloud-volume (>=0.6.12, <=0.8.1) +11 more potentially affected by CVE-2020-5312 via pillow (4.2.1)

pillow PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - chromewhip =0.2.2, =0.6.12, =4.4.1, =0.0.1a0, =0.9.0, =0.6.19a0, =0.3.5, =0.0.3, =11.0.0, =11.2.0 Source cves: CVE-2020-5312 Source advisory:...

aceui (>=1.0.2, <=1.0.21), biseau (>=0.0.1, <=0.0.18) +23 more potentially affected by CVE-2020-5312 via pillow (5.3.0)

pillow PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aceui =1.0.2, =0.0.1, =0.1.0, =0.1.1, =0.1.0, =0.3.0, =0.2.0, =1.0.0a1, =0.7.0a1, =1.0.8, =1.0.10 - nider 0.5.0 - optimuspyspark 2.1.1 and more Sour...

bedrock (0.1.0.dev10), dbcollection (>=0.2.2, <=0.2.6) +19 more potentially affected by CVE-2020-5312 via pillow (5.1.0)

pillow PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - bedrock 0.1.0.dev10 - dbcollection =0.2.2, =0.0.6, =1.0.0, =0.0.0a1, =0.1.0, =4.0.0, =4.0.0, =4.0.0, =4.1.1 and more Source cves: CVE-2020-5312 Sour...

balebot (>=1.2.8, <=1.8.15), demosys-py (>=1.0.6, <=2.0.3) +19 more potentially affected by CVE-2020-5312 via pillow (5.2.0)

pillow PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - balebot =1.2.8, =1.0.6, =0.3.0, =1.0.7, =1.2.1, =1.8.3, =2.1.0, =2.0.3, =2.1.0 - poltools 1.0.0 and more Source cves: CVE-2020-5312 Source advisory:...

memegen-desktop (>=0.0.1, <=0.1.1), moca (0.3.3) +1 more potentially affected by CVE-2020-5312 via pillow (3.3.1)

pillow PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - memegen-desktop =0.0.1, =0.0.4.dev68, =0.0.5.dev3 Source cves: CVE-2020-5312 Source advisory: OSV:GHSA-P49H-HJVM-JG3H...

django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) potentially affected by CVE-2020-5312 via pillow (2.4.0)

pillow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-badgify-lab 0.1.5 - django-oscar =1.0.0, =1.0.2 Source cves: CVE-2020-5312 Source advisory: OSV:GHSA-P49H-HJVM-JG3H...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2020-5312 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2020-5312 Source advisory: OSV:GHSA-P49H-HJVM-JG3H...

blockies (0.0.1), demosys-py (>=0.1.2, <=0.3.12) +17 more potentially affected by CVE-2020-5312 via pillow (4.0.0)

pillow PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - blockies 0.0.1 - demosys-py =0.1.2, =0.0.2, =1.6.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =0.1.0, =3.0.0 and more Source cves: CVE-2020-53...

codeforlife-portal (>=1.1.1, <=2.16.0) potentially affected by CVE-2020-5312 via pillow (3.3.2)

pillow PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - codeforlife-portal =1.1.1, =2.16.0 Source cves: CVE-2020-5312 Source advisory: OSV:GHSA-P49H-HJVM-JG3H...

ayab (0.9.0), distribusi (>=0.0.2, <=0.0.4) potentially affected by CVE-2020-5312 via pillow (4.1.0)

pillow PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - ayab 0.9.0 - distribusi =0.0.2, =0.0.4 Source cves: CVE-2020-5312 Source advisory: OSV:GHSA-P49H-HJVM-JG3H...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-1729)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NewStart CGSL CORE 5.05 / MAIN 5.05 : python-pillow Multiple Vulnerabilities (NS-SA-2020-0104)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has python-pillow packages installed that are affected by multiple vulnerabilities: - An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very larg...