FLAT-DNXYB – Vulnerability | Fluid Attacks Database

Database

Description

arbitrary code execution

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
alpine v3.15	py3-pillow	=7.1.1-r0 \|\| =7.1.2-r0 \|\| =7.2.0-r0 \|\| =8.1.0-r0 \|\| =8.1.2-r0 \|\| =8.1.2-r1 \|\| >=0 <8.3.0-r0	8.3.0-r0
debian 11	pillow	>=0 <8.1.2+dfsg-0.3	8.1.2+dfsg-0.3
debian 12	pillow	>=0 <8.1.2+dfsg-0.3	8.1.2+dfsg-0.3
pypi	pillow	>=0 <8.3.0	8.3.0
debian 13	pillow	>=0 <8.1.2+dfsg-0.3	8.1.2+dfsg-0.3
debian 14	pillow	>=0 <8.1.2+dfsg-0.3	8.1.2+dfsg-0.3
rpm rhel8	python-pillow	<0:5.1.1-16.el8	0:5.1.1-16.el8
rpm rhel7	python-pillow	-	-
alpm rolling_release	python-pillow	>=8.2.0-2 <8.3.0-1	8.3.0-1

Aliases

1. CVE-2021-345522. NVD-2021-345523. OSV-ALPINE-2021-345524. OSV-2021-345525. OSV-DEBIAN-2021-345526. GHSA-7534-mm45-c74v7. GCVE-2021-345528. SECURITY-CVE-2021-345529. SECURITY-TRACKER-CVE-2021-3455210. lists.debian.org11. security.gentoo.org

References

1. https://github.com/python-pillow/Pillow/pull/55672. https://github.com/python-pillow/Pillow/commit/31c473898c29d1b7cb6555ce67d9503a4906b83f3. https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2021-331.yaml4. https://lists.fedoraproject.org/archives/list/[email protected]/message/7V6LCG525ARIX6LX5QRYNAWVDD2MD2SV5. https://lists.fedoraproject.org/archives/list/[email protected]/message/VUGBBT63VL7G4JNOEIPDJIOC34ZFBKNJ6. https://pillow.readthedocs.io/en/stable/releasenotes/8.3.0.html#buffer-overflow7. https://pillow.readthedocs.io/en/stable/releasenotes/index.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.