Inadequate file size control In pillow
Description
DOS attack in Pillow when processing specially crafted image files An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 14 | 6.2.0-1 | ||
 pypi | 6.2.0 | ||
debian 11 | 6.2.0-1 | ||
debian 13 | 6.2.0-1 | ||
debian 12 | 6.2.0-1 | ||
 rpm rhel8 | 0:5.1.1-10.el8_1 | ||
rpm rhel7 | 0:2.0.0-20.gitd1c6db8.el7_7 | ||
rpm rhel6 | - | - | |
rpm rhel5 | - | - |
Aliases
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14.
References
1. 2. 3. 4. 5. 6. 7. 8.