Описание
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | code-not-present |
| devel | not-affected | 9.2.0-1 |
| esm-infra-legacy/trusty | not-affected | code-not-present |
| esm-infra-legacy/xenial | not-affected | code-not-present |
| esm-infra/bionic | not-affected | code-not-present |
| esm-infra/focal | released | 7.0.0-4ubuntu0.7 |
| esm-infra/xenial | not-affected | code-not-present |
| focal | released | 7.0.0-4ubuntu0.7 |
| impish | ignored | end of life |
| jammy | not-affected | 9.0.1-1build1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-apps/focal | released | 6.2.1-3ubuntu0.1~esm1 |
| esm-infra-legacy/trusty | DNE | |
| focal | ignored | end of standard support, was needed |
| impish | DNE | |
| jammy | DNE | |
| kinetic | DNE | |
| lunar | DNE | |
| mantic | DNE |
Показывать по
6.4 Medium
CVSS2
9.1 Critical
CVSS3
Связанные уязвимости
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
Pillow before 9.0.1 allows attackers to delete files because spaces in ...
Уязвимость библиотеки для работы с растровой графикой Pillow, связанная с чтением за допустимыми границами буфера данных, позволяющая нарушителю нарушить целостность данных, а также вызвать отказ в обслуживании
6.4 Medium
CVSS2
9.1 Critical
CVSS3