Multiple vulnerabilities in Pillow
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 5 |
| CVE-ID | CVE-2020-10177 CVE-2020-11538 CVE-2020-10994 CVE-2020-10378 CVE-2020-10379 |
| CWE-ID | CWE-125 CWE-119 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software Subscribe |
Pillow Universal components / Libraries / Libraries used by multiple products |
| Vendor | Alex Clark and Contributors |
Security Bulletin
This security bulletin contains information about 5 vulnerabilities.
1) Out-of-bounds read
EUVDB-ID: #VU29436
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-10177
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in "libImaging/FliDecode.c". A remote attacker can trigger out-of-bounds read error and read contents of memory on the system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsPillow: 6.2.0 - 7.0.0
External linkshttp://github.com/python-pillow/Pillow/commits/master/src/libImaging
http://github.com/python-pillow/Pillow/pull/4503
http://github.com/python-pillow/Pillow/pull/4538
http://pillow.readthedocs.io/en/stable/releasenotes/6.2.3.html
http://pillow.readthedocs.io/en/stable/releasenotes/7.1.0.html
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Out-of-bounds read
EUVDB-ID: #VU29437
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-11538
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition within the parsing of SGI image files in "libImaging/SgiRleDecode.c". A remote attacker can create a specially crafted SGI file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsPillow: 6.2.0 - 7.0.0
External linkshttp://github.com/python-pillow/Pillow/pull/4504
http://github.com/python-pillow/Pillow/pull/4538
http://pillow.readthedocs.io/en/stable/releasenotes/7.1.0.html
http://pillow.readthedocs.io/en/stable/releasenotes/index.html
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Out-of-bounds read
EUVDB-ID: #VU29438
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-10994
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in "libImaging/Jpeg2KDecode.c". A remote attacker can create a specially crafted JP2 file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsPillow: 6.2.0 - 7.0.0
External linkshttp://github.com/python-pillow/Pillow/commits/master/src/libImaging/
http://github.com/python-pillow/Pillow/pull/4505
http://github.com/python-pillow/Pillow/pull/4538
http://pillow.readthedocs.io/en/stable/releasenotes/
http://pillow.readthedocs.io/en/stable/releasenotes/7.1.0.html
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Out-of-bounds read
EUVDB-ID: #VU29439
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-10378
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service attack.
The vulnerability exists due to an out-of-bounds read in "libImaging/PcxDecode.c" that occurs when reading PCX files where state->shuffle is instructed to read beyond state->buffer. A remote attacker can create a specially crafted PCX file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.
MitigationInstall update from vendor's website.
Vulnerable software versionsPillow: 6.2.0 - 7.0.0
External linkshttp://github.com/python-pillow/Pillow/commit/6a83e4324738bb0452fbe8074a995b1c73f08de7#diff-9478f2787e3ae9668a15123b165c23ac
http://github.com/python-pillow/Pillow/commits/master/src/libImaging
http://github.com/python-pillow/Pillow/pull/4538
http://pillow.readthedocs.io/en/stable/releasenotes/6.2.3.html
http://pillow.readthedocs.io/en/stable/releasenotes/7.1.0.html
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Buffer overflow
EUVDB-ID: #VU29440
Risk: High
CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-10379
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in "libImaging/TiffDecode.c". A remote attacker can trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsPillow: 6.2.0 - 7.0.0
External linkshttp://github.com/python-pillow/Pillow/commit/46f4a349b88915787fea3fb91348bb1665831bbb#diff-9478f2787e3ae9668a15123b165c23ac
http://github.com/python-pillow/Pillow/commits/master/src/libImaging
http://github.com/python-pillow/Pillow/pull/4538
http://pillow.readthedocs.io/en/stable/releasenotes/6.2.3.html
http://pillow.readthedocs.io/en/stable/releasenotes/7.1.0.html
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
