Integer overflow in Pillow - CVE-2020-5310

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU23910

Integer overflow in Pillow - CVE-2020-5310

Published: January 3, 2020


Vulnerability identifier: #VU23910
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-5310
CWE-ID: CWE-190
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to TIFF decoding integer overflow in "libImaging/TiffDecode.c". A remote attacker can trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

Pillow
pillow (Ubuntu package)
py-pillow (Alpine package)
py3-pillow (Alpine package)
python3-pillow-help
python-pillow-debugsource
python3-pillow
python-pillow-debuginfo
python2-pillow
python2-pillow-devel
python3-pillow-devel
python2-pillow-help
python-pillow
Fedora
openEuler

How to mitigate CVE-2020-5310

Install updates from vendor's website.

Pillow - update to 6.2.2
pillow (Ubuntu package) - addressed in versions 3.1.2-0ubuntu1.3, 5.1.0-1ubuntu0.2, 6.1.0-1ubuntu0.2
py-pillow (Alpine package) - update to 6.2.2-r0
py3-pillow (Alpine package) - addressed in versions 7.1.2-r1, 7.2.0-r1, 8.1.0-r0
python3-pillow-help - update to 5.3.0-10
python-pillow-debugsource - update to 5.3.0-10
python3-pillow - update to 5.3.0-10
python-pillow-debuginfo - update to 5.3.0-10
python2-pillow - update to 5.3.0-10
python2-pillow-devel - update to 5.3.0-10
python3-pillow-devel - update to 5.3.0-10
python2-pillow-help - update to 5.3.0-10
python-pillow - update to 5.3.0-10
python-pillow - addressed in versions 5.4.1-4.fc30, 6.2.2-1.fc31
python3-pillow - update to 6.2.2-1.el7

External References

Related Security Bulletins