Pillow 缓冲区错误漏洞

漏洞信息详情

Pillow是一款基于Python的图像处理库。

Pillow 8.1.1之前版本中存在安全漏洞。该漏洞源于在解码精心编制的YCbCr文件时，TiffDecode会出现基于堆的缓冲区溢出。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://ubuntu.com/security/notices/USN-4763-1

来源:MISC

链接:https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3472

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/161765/Ubuntu-Security-Notice-USN-4763-1.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/163500/Gentoo-Linux-Security-Advisory-202107-33.html

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Pillow-five-vulnerabilities-34834

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2021-25289

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0887

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/164555/Red-Hat-Security-Advisory-2021-3917-01.html

暂无