[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250053

 
 

909

 
 

195940

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2022-1786 --- python-pillow

ID: oval:org.secpod.oval:def:1700904Date: (C)2022-05-04   (M)2024-03-28
Class: PATCHFamily: unix




A flaw was found in python-pillow. The vulnerability occurs due to improper initialization of image paths, leading to a buffer over-read and improper initialization. This flaw allows an attacker to unauthorized memory access that causes memory access errors, incorrect results, or crashes. A flaw was found in python-pillow. The vulnerability occurs due to improper initialization of image paths, leading to a buffer over-read and improper initialization. This flaw allows an attacker to unauthorized memory access that causes memory access errors, incorrect results, or crashes. A flaw was found in python-pillow. The vulnerability occurs due to Improper Neutralization, leading to command injection. This flaw allows an attacker to externally-influenced input commands that modify the intended command

Platform:
Amazon Linux 2
Product:
python-pillow
Reference:
ALAS2-2022-1786
CVE-2022-22815
CVE-2022-22816
CVE-2022-22817
CVE    3
CVE-2022-22817
CVE-2022-22815
CVE-2022-22816
CPE    2
cpe:/a:python:python-pillow
cpe:/o:amazon:linux:2

© SecPod Technologies