FLAT-93N1N – Vulnerability | Fluid Attacks Database

Database

Description

denial of service

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
alpine v3.15	py3-pillow	>=0 <8.4.0-r0	8.4.0-r0
pypi	pillow	>=5.2.0 <8.3.2	8.3.2
debian 14	pillow	>=0 <8.3.2-1	8.3.2-1
alpine v3.12	py3-pillow	>=0 <7.1.2-r2	7.1.2-r2
debian 12	pillow	>=0 <8.3.2-1	8.3.2-1
debian 13	pillow	>=0 <8.3.2-1	8.3.2-1
alpine v3.11	py-pillow	>=0 <6.2.1-r1	6.2.1-r1
alpine v3.13	py3-pillow	>=0 <7.2.0-r2	7.2.0-r2
alpine v3.14	py3-pillow	>=0 <8.2.0-r1	8.2.0-r1
alpm rolling_release	python-pillow	>=8.3.1-1 <8.3.2-1	8.3.2-1

Aliases

1. CVE-2021-234372. NVD-2021-234373. OSV-ALPINE-2021-234374. OSV-2021-234375. OSV-DEBIAN-2021-234376. GHSA-98vv-pw6r-q6q47. GCVE-2021-234378. SECURITY-CVE-2021-234379. lists.debian.org10. security.gentoo.org11. SECURITY-TRACKER-CVE-2021-23437

References

1. https://github.com/python-pillow/Pillow/commit/9e08eb8f78fdfd2f476e1b20b7cf38683754866b2. https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2021-317.yaml3. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNSG6VFXTAROGF7ACYLMAZNQV4EJ6I2C4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VKRCL7KKAKOXCVD7M6WC5OKFGL4L3SJT5. https://lists.fedoraproject.org/archives/list/[email protected]/message/RNSG6VFXTAROGF7ACYLMAZNQV4EJ6I2C6. https://lists.fedoraproject.org/archives/list/[email protected]/message/VKRCL7KKAKOXCVD7M6WC5OKFGL4L3SJT7. https://pillow.readthedocs.io/en/stable/releasenotes/8.3.2.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-93N1N – Vulnerability | Fluid Attacks Database