An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-pillowUpgrade python-pillow-debuginfoUpgrade python-pillow-saneUpgrade python-pillow-tkUpgrade python-pillow-develUpgrade python-pillow-doc | Apr 27, 2020 | Oct 4, 2019 |
| Centos_linux | — | Upgrade python-pillow-debuginfoUpgrade python-pillow-saneUpgrade python-pillow-qtUpgrade python-pillow-develUpgrade python-pillow-docUpgrade python3-pillowUpgrade python-pillow-debugsourceUpgrade python-pillowUpgrade python-pillow-tkUpgrade python3-pillow-debuginfoUpgrade python3-pillow-tk-debuginfo | Feb 25, 2020 | Oct 4, 2019 |
| Debian | — | Upgrade pillow | Jul 30, 2024 | Oct 4, 2019 |
| Freebsd | — | Upgrade py27-pillowUpgrade py36-pillowUpgrade py37-pillowUpgrade py35-pillow | Oct 16, 2019 | Oct 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-pillow | Nov 3, 2020 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-pillow | Sep 28, 2020 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-pillow | Feb 24, 2020 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-pillowUpgrade python3-pillow | Jan 3, 2020 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python-pillowUpgrade python3-pillow | Feb 8, 2021 | Oct 4, 2019 |
| Oracle Solaris | — | Upgrade library/libxml2 to version 2.9.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip-34 to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat-35 to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental-37 to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip-35 to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental-27 to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cython-37 to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink-37 to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly-27 to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot-35 to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot-37 to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat-34 to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip-37 to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna-34 to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/pyparsing-37 to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest-35 to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/rpdb to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna-35 to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/cryptography-34 to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-web2-27 to version 8.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade compress/gzip to version 1.10-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2-34 to version 0.6.8-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle-35 to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/wcwidth-35 to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/astroid-27 to version 1.4.8-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography-37 to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/colorama-35 to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow-27 to version 5.1.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/cmd2-27 to version 0.6.8-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/xattr-34 to version 0.9.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/versioning/mercurial to version 4.9.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/rpdb-34 to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.17-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-35 to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot-27 to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-35 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography-27 to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest-27 to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-34 to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow-37 to version 7.0.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/rpdb-35 to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cython-27 to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyparsing-27 to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/wcwidth-37 to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-appconf to version 1.0.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/colorama-37 to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/astroid-35 to version 2.2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.17-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/tkinter-37 to version 3.7.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-34 to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-web2 to version 8.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-35 to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/wcwidth-34 to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/colorama to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink-35 to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/tkinter-35 to version 3.5.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob-34 to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-34 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyparsing-35 to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-appconf-27 to version 1.0.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat-37 to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot-34 to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental-34 to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/tkinter-34 to version 3.4.10-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-37 to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/rpdb-37 to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/wcwidth to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-34 to version 3.4.10-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-27 to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly-34 to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.17-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow-35 to version 7.0.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/idna to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/webob-37 to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip-27 to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna-27 to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/astroid to version 2.2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/versioning/mercurial/hg-git-27 to version 0.8.12-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/astroid-34 to version 1.4.8-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyparsing to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyparsing-34 to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink-27 to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly-37 to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-37 to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-37 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/colorama-27 to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-27 to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade text/texinfo to version 6.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest-37 to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-27 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-35 to version 3.5.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/oracle/odpi-230 to version 2.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle-34 to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/rpdb-27 to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink-34 to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/astroid-37 to version 2.2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/versioning/mercurial/hg-git to version 0.8.12-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2 to version 0.9.13-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/xattr-27 to version 0.9.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/libxml2-34 to version 2.9.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow to version 7.0.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/wcwidth-27 to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cython-34 to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/colorama-34 to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle-27 to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cython to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2-35 to version 0.9.13-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/libxml2-37 to version 2.9.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2-37 to version 0.9.13-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography-35 to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle-37 to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental-35 to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob-27 to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob-35 to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly-35 to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat-27 to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cython-35 to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/xattr to version 0.9.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/xattr-35 to version 0.9.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna-37 to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/versioning/mercurial-27 to version 4.9.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-37 to version 3.7.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/libxml2-27 to version 2.9.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest-34 to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow-34 to version 5.1.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4 | Jan 19, 2021 | Oct 4, 2019 |
| Oracle_linux | — | Upgrade python-pillow-tkUpgrade python-pillow-qtUpgrade python-pillow-develUpgrade python-pillow-saneUpgrade python3-pillowUpgrade python-pillowUpgrade python-pillow-doc | Oct 5, 2022 | Oct 4, 2019 |
| Redhat_linux | — | Upgrade python-pillow-tkUpgrade python-pillow-debugsourceUpgrade python-pillow-qtUpgrade python-pillow-saneUpgrade python-pillow-develUpgrade python3-pillow-debuginfoUpgrade python3-pillowUpgrade python-pillow-docUpgrade python3-pillow-tk-debuginfoUpgrade python-pillow-debuginfoUpgrade python-pillowNo solution exists | Feb 25, 2020 | Oct 4, 2019 |
| Ubuntu | — | Upgrade python-pil (Ubuntu Pro)Upgrade python-imaging (Ubuntu Pro)Upgrade python3-imaging (Ubuntu Pro)Upgrade python-pilUpgrade python-imagingUpgrade python3-pilUpgrade python3-pil (Ubuntu Pro) | Feb 7, 2020 | Oct 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub