54 matches found
EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2022-1436)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. CVE-2022-22815 - pathgetbbox in path.c in Pillow befor...
EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2022-1457)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. CVE-2022-22815 - pathgetbbox in path.c in Pillow befor...
python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c
A flaw was found in python-pillow. The vulnerability occurs due to improper initialization of image paths, leading to a buffer over-read and improper initialization. This flaw allows an attacker to unauthorized memory access that causes memory access errors, incorrect results, or crashes...
RHEL 8 : python-pillow (RHSA-2022:0669)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0669 advisory. The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal...
RHEL 8 : python-pillow (RHSA-2022:0665)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0665 advisory. The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal...
python-pillow security update
An update is available for python-pillow. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The python-pillow packages contain a Python image processing library th...
OESA-2022-1526 python-pillow security update
Python image processing library. Security Fixes: pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.CVE-2022-22816 PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec...
The vulnerability of the `path_getbbox` function in the Python Pillow image processing library, related to an incorrect path limitation for the directory, allows a hacker to gain access to arbitrary files on the system.
The vulnerability of the pathgetbbox function in the Python Pillow image processing library is related to an incorrect path limitation for the directory. Exploiting this vulnerability could allow a malicious actor to gain access to arbitrary files on the system by sending a specially crafted HTTP...
Debian DLA-2893-1 : pillow - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2893 advisory. - pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. CVE-2022-22815 - pathgetbbox in path.c in Pillow before 9.0.0 has a buffer...
GHSA-PW3C-H7WP-CVHX Improper Initialization in Pillow
Pillow is the friendly PIL Python Imaging Library fork. pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...
Improper Initialization in Pillow
Pillow is the friendly PIL Python Imaging Library fork. pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...
GHSA-XRCV-F9GM-V42C Out-of-bounds Read in Pillow
pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...
Out Of Bound Reads
pillow is vulnerable to out of bound reads. The vulnerability exists in pathgetbbox function of path.c due to improper handling of path count which allows an attacker to read sensitive information or causes an application crash...
Denial Of Service (DoS)
pillow is vulnerable to denial of service. The pathgetbbox in path.c does not properly initialize the coordinates for zero values, allowing an attacker to cause an application crash through the ImagePath.Path...
CVE-2022-22815
pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...
DEBIAN-CVE-2022-22816
pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...
DEBIAN-CVE-2022-22815
pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...
CVE-2022-22816
pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...
