Описание
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
A flaw was found in Pillow. The cms_transform_new function in src/_imagingcms.c does not validate the length of its parameters before copying them into fixed-size buffers, leading to a buffer overflow, resulting in a denial of service.
Отчет
This flaw can be triggered when the ImageCms.buildTransform function is called with the InMode or OutMode arguments with a string larger than 8 bytes. An application is not vulnerable if these parameters are not controlled by the user or are validated before the function is called. Additionally, the Pillow ImageCms module functions should not be exposed to untrusted usage without input validation. For this reason, this flaw has been rated with a moderate impact.
Меры по смягчению последствий
Make sure the ImageCms.buildTransform function is not called with the InMode or OutMode arguments with a string bigger than 8 bytes.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | python-pillow | Out of support scope | ||
| Red Hat Quay 3 | quay/quay-rhel8 | Affected | ||
| Red Hat Ansible Automation Platform 2.4 for RHEL 8 | python3x-pillow | Fixed | RHSA-2024:3781 | 10.06.2024 |
| Red Hat Ansible Automation Platform 2.4 for RHEL 9 | python-pillow | Fixed | RHSA-2024:3781 | 10.06.2024 |
| Red Hat Enterprise Linux 8 | python-pillow | Fixed | RHSA-2024:4227 | 02.07.2024 |
| Red Hat Satellite 6.15 for RHEL 8 | python-pillow | Fixed | RHSA-2024:5662 | 20.08.2024 |
| Red Hat Satellite 6.15 for RHEL 8 | python-pillow | Fixed | RHSA-2024:5662 | 20.08.2024 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists bec ...
EPSS
6.5 Medium
CVSS3