Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-10378

Опубликовано: 25 июн. 2020
Источник: redhat
CVSS3: 5.9
EPSS Низкий

Описание

In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.

A flaw was found in python-pillow. In libImaging/PcxDecode.c, an out-of-bounds read occurs when reading PCX files where state->shuffle is instructed to read beyond state->buffer.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5python-imagingOut of support scope
Red Hat Enterprise Linux 6python-imagingOut of support scope
Red Hat Enterprise Linux 7python-pillowFix deferred
Red Hat Enterprise Linux 8python-pillowFix deferred
Red Hat Quay 3quay/clair-rhel8FixedRHSA-2021:042004.02.2021
Red Hat Quay 3quay/quay-bridge-operator-bundleFixedRHSA-2021:042004.02.2021
Red Hat Quay 3quay/quay-bridge-operator-rhel8FixedRHSA-2021:042004.02.2021
Red Hat Quay 3quay/quay-builder-qemu-rhcos-rhel8FixedRHSA-2021:042004.02.2021
Red Hat Quay 3quay/quay-builder-rhel8FixedRHSA-2021:042004.02.2021
Red Hat Quay 3quay/quay-container-security-operator-bundleFixedRHSA-2021:042004.02.2021

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1852832python-pillow: an out-of-bounds read in libImaging/PcxDecode.c can occur when reading PCX files

EPSS

Процентиль: 56%
0.00333
Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 5 лет назад

In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.

CVSS3: 5.5
nvd
больше 5 лет назад

In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.

CVSS3: 5.5
debian
больше 5 лет назад

In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds rea ...

CVSS3: 5.5
github
больше 4 лет назад

Out-of-bounds read in Pillow

EPSS

Процентиль: 56%
0.00333
Низкий

5.9 Medium

CVSS3