DSA-5053: -1 pillow -- security update

Published Jan 21, 2022

Updated

Multiple security issues were discovered in Pillow, a Python imaging library, which could result in denial of service and potentially the execution of arbitrary code if malformed images are processed.

Affected Software

2 affected components

debian/pillow

Event History

Jan 21, 2022

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2022-22815
CVE-2022-22816
CVE-2022-22817

Frequently Asked Questions

Who is exposed to these issues?

Applications using Pillow are exposed when they process malformed images. The stated impact includes denial of service and potentially arbitrary code execution.

What does an attacker need to exploit the issues?

An attacker would need to cause the affected application to process a malformed image. The advisory does not provide further details about required access or delivery methods.

DSA-5053: -1 pillow -- security update

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who is exposed to these issues?

What does an attacker need to exploit the issues?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to these issues?

What does an attacker need to exploit the issues?