According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Pillow before 8.1.1 allows attackers to cause a denial     of service (memory consumption) because the reported     size of a contained image is not properly checked for a     BLP container, and thus an attempted memory allocation     can be very large.(CVE-2021-27921)

  - Pillow before 8.1.1 allows attackers to cause a denial     of service (memory consumption) because the reported     size of a contained image is not properly checked for     an ICNS container, and thus an attempted memory     allocation can be very large.(CVE-2021-27922)

  - Pillow before 8.1.1 allows attackers to cause a denial     of service (memory consumption) because the reported     size of a contained image is not properly checked for     an ICO container, and thus an attempted memory     allocation can be very large.(CVE-2021-27923)

  - In Pillow before 8.1.0, SGIRleDecode has a 4-byte     buffer over-read when decoding crafted SGI RLE image     files because offsets and length tables are     mishandled.(CVE-2020-35655)

  - An issue was discovered in Pillow before 8.2.0.
    PSDImagePlugin.PsdImageFile lacked a sanity check on     the number of input layers relative to the size of the     data block. This could lead to a DoS on Image.open     prior to Image.load.(CVE-2021-28675)

  - An issue was discovered in Pillow before 8.2.0. For FLI     data, FliDecode did not properly check that the block     advance was non-zero, potentially leading to an     infinite loop on load.(CVE-2021-28676)

  - An issue was discovered in Pillow before 8.2.0. For EPS     data, the readline implementation used in EPSImageFile     has to deal with any combination of \r and \n as line     endings. It used an accidentally quadratic method of     accumulating lines while looking for a line ending. A     malicious EPS file could use this to perform a DoS of     Pillow in the open phase, before an image was accepted     for opening.(CVE-2021-28677)

  - An issue was discovered in Pillow before 8.2.0. For BLP     data, BlpImagePlugin did not properly check that reads     (after jumping to file offsets) returned data. This     could lead to a DoS where the decoder could be run a     large number of times on empty data.(CVE-2021-28678)

  - An issue was discovered in Pillow before 8.2.0. There     is an out-of-bounds read in J2kDecode, in     j2ku_graya_la.(CVE-2021-25287)

  - An issue was discovered in Pillow before 8.2.0. There     is an out-of-bounds read in J2kDecode, in     j2ku_gray_i.(CVE-2021-25288)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

python-pillow reports :

This release fixes several vulnerabilities found with `OSS-Fuzz`.

- `CVE-2021-25288`: Fix OOB read in Jpeg2KDecode. This dates to Pillow 2.4.0.

- `CVE-2021-28675`: Fix DOS in PsdImagePlugin. This dates to the PIL fork.

- `CVE-2021-28676`: Fix FLI DOS. This dates to the PIL fork.

- `CVE-2021-28677`: Fix EPS DOS on _open. This dates to the PIL fork.

- `CVE-2021-28678`: Fix BLP DOS. This dates to Pillow 5.1.0.

- Fix memory DOS in ImageFont. This dates to the PIL fork.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1607-1 advisory.

  - An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in     j2ku_graya_la. (CVE-2021-25287)

  - An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in     j2ku_gray_i. (CVE-2021-25288)

  - An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the     number of input layers relative to the size of the data block. This could lead to a DoS on Image.open     prior to Image.load. (CVE-2021-28675)

  - An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the     block advance was non-zero, potentially leading to an infinite loop on load. (CVE-2021-28676)

  - An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in     EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally     quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use     this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.
    (CVE-2021-28677)

  - An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that     reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be     run a large number of times on empty data. (CVE-2021-28678)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-146 advisory.

    An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an     invalid size. (CVE-2021-25290)

    An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in     TiffreadRGBATile via invalid tile boundaries. (CVE-2021-25291)

    An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.
    (CVE-2021-25293)

    Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the     reported size of a contained image is not properly checked for a BLP container, and thus an attempted     memory allocation can be very large. (CVE-2021-27921)

    Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the     reported size of a contained image is not properly checked for an ICNS container, and thus an attempted     memory allocation can be very large. (CVE-2021-27922)

    Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the     reported size of a contained image is not properly checked for an ICO container, and thus an attempted     memory allocation can be very large. (CVE-2021-27923)

    An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the     block advance was non-zero, potentially leading to an infinite loop on load. (CVE-2021-28676)

    An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in     EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally     quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use     this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.
    (CVE-2021-28677)

    Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass     controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.
    (CVE-2021-34552)

    Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
    (CVE-2022-45198)

    Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL. (CVE-2022-45199)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Pillow before 8.2.0. There     is an out-of-bounds read in J2kDecode, in     j2ku_graya_la.(CVE-2021-25287)

  - An issue was discovered in Pillow before 8.2.0. There     is an out-of-bounds read in J2kDecode, in     j2ku_gray_i.(CVE-2021-25288)

  - Pillow before 8.1.1 allows attackers to cause a denial     of service (memory consumption) because the reported     size of a contained image is not properly checked for a     BLP container, and thus an attempted memory allocation     can be very large.(CVE-2021-27921)

  - Pillow before 8.1.1 allows attackers to cause a denial     of service (memory consumption) because the reported     size of a contained image is not properly checked for     an ICNS container, and thus an attempted memory     allocation can be very large.(CVE-2021-27922)

  - Pillow before 8.1.1 allows attackers to cause a denial     of service (memory consumption) because the reported     size of a contained image is not properly checked for     an ICO container, and thus an attempted memory     allocation can be very large.(CVE-2021-27923)

  - An issue was discovered in Pillow before 8.2.0.
    PSDImagePlugin.PsdImageFile lacked a sanity check on     the number of input layers relative to the size of the     data block. This could lead to a DoS on Image.open     prior to Image.load.(CVE-2021-28675)

  - An issue was discovered in Pillow before 8.2.0. For FLI     data, FliDecode did not properly check that the block     advance was non-zero, potentially leading to an     infinite loop on load.(CVE-2021-28676)

  - An issue was discovered in Pillow before 8.2.0. For EPS     data, the readline implementation used in EPSImageFile     has to deal with any combination of \r and \n as line     endings. It used an accidentally quadratic method of     accumulating lines while looking for a line ending. A     malicious EPS file could use this to perform a DoS of     Pillow in the open phase, before an image was accepted     for opening.(CVE-2021-28677)

  - An issue was discovered in Pillow before 8.2.0. For BLP     data, BlpImagePlugin did not properly check that reads     (after jumping to file offsets) returned data. This     could lead to a DoS where the decoder could be run a     large number of times on empty data.(CVE-2021-28678)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
152285	EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2021-2279)	Nessus	Huawei Local Security Checks	8/9/2021	12/6/2023	critical
149464	FreeBSD : Pillow -- multiple vulnerabilities (f947aa26-b2f9-11eb-a5f7-a0f3c100ae18)	Nessus	FreeBSD Local Security Checks	5/13/2021	6/10/2021	critical
195340	openSUSE 15 Security Update : python-Pillow (SUSE-SU-2024:1607-1)	Nessus	SuSE Local Security Checks	5/11/2024	5/11/2024	critical
173344	Amazon Linux 2023 : python3-pillow, python3-pillow-devel, python3-pillow-tk (ALAS2023-2023-146)	Nessus	Amazon Linux Local Security Checks	3/23/2023	12/11/2024	critical
152397	EulerOS 2.0 SP8 : python-pillow (EulerOS-SA-2021-2314)	Nessus	Huawei Local Security Checks	8/10/2021	12/4/2023	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical