7.5
CVSSv2

CVE-2020-5312

Published: 03/01/2020 Updated: 07/11/2023
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

libImaging/PcxDecode.c in Pillow prior to 6.2.2 has a PCX P mode buffer overflow.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

python pillow

canonical ubuntu linux 16.04

debian debian linux 9.0

debian debian linux 10.0

canonical ubuntu linux 18.04

fedoraproject fedora 30

canonical ubuntu linux 14.04

canonical ubuntu linux 19.10

fedoraproject fedora 31

Vendor Advisories

Debian Bug report logs - #948224 pillow: CVE-2019-19911 CVE-2020-5310 CVE-2020-5311 CVE-2020-5312 CVE-2020-5313 Package: pillow; Maintainer for pillow is Matthias Klose <doko@debianorg>; Reported by: Markus Koschany <apo@debianorg> Date: Sun, 5 Jan 2020 15:33:01 UTC Severity: grave Tags: security Found in version ...
Several security issues were fixed in Pillow ...
Multiple security issues were discovered in Pillow, a Python imaging library, which could result in denial of service and potentially the execution of arbitrary code if malformed PCX, FLI, SGI or TIFF images are processed For the oldstable distribution (stretch), these problems have been fixed in version 400-4+deb9u1 For the stable distribution ...
Synopsis Moderate: Red Hat Quay v340 security update Type/Severity Security Advisory: Moderate Topic Red Hat Quay 340 is now available with bug fixes and variousenhancementsRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVS ...
Synopsis Important: python-pillow security update Type/Severity Security Advisory: Important Topic An update for python-pillow is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) ...
Synopsis Important: python-pillow security update Type/Severity Security Advisory: Important Topic An update for python-pillow is now available for Red Hat Enterprise Linux 80 Update Services for SAP SolutionsRed Hat Product Security has rated this update as having a security impact of Important A Common ...
Synopsis Important: python-pillow security update Type/Severity Security Advisory: Important Topic An update for python-pillow is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) ...
Synopsis Moderate: OpenShift Container Platform 4138 security update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat OpenShift Container Platform 41Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scorin ...
Synopsis Moderate: OpenShift Container Platform 435 security update Type/Severity Security Advisory: Moderate Topic An update for openshift-enterprise-apb-base-container, openshift-enterprise-mariadb-apb, openshift-enterprise-mysql-apb, and openshift-enterprise-postgresql-apb is now available for Red Hat ...
Synopsis Important: python-imaging security update Type/Severity Security Advisory: Important Topic An update for python-imaging is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVS ...
Synopsis Moderate: OpenShift Container Platform 435 openshift-enterprise-ansible-operator-container security update Type/Severity Security Advisory: Moderate Topic An update for openshift-enterprise-ansible-operator-container is now available for Red Hat OpenShift Container Platform 43Red Hat Product Se ...
A flaw was discovered in the way the python-pillow may allocate a large amount of memory or require a long time while processing specially crafted image files, possibly causing a denial of service Applications that use the library to process untrusted files may be vulnerable to this flaw (CVE-2019-16865) A flaw was discovered in python-pillow whe ...