Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.
{ "binaries": [ { "binary_name": "python-imaging", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-imaging-compat", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-imaging-dbg", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-imaging-doc", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-imaging-sane", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-imaging-sane-dbg", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-imaging-tk", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-imaging-tk-dbg", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-pil", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-pil-dbg", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-pil-dbgsym", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-pil-doc", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-pil.imagetk", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-pil.imagetk-dbg", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-pil.imagetk-dbgsym", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-sane", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-sane-dbg", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python-sane-dbgsym", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-imaging", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-imaging-dbg", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-imaging-sane", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-imaging-sane-dbg", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-imaging-tk", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-imaging-tk-dbg", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-pil", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-pil-dbg", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-pil-dbgsym", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-pil.imagetk", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-pil.imagetk-dbg", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-pil.imagetk-dbgsym", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-sane", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-sane-dbg", "binary_version": "2.3.0-1ubuntu3.2" }, { "binary_name": "python3-sane-dbgsym", "binary_version": "2.3.0-1ubuntu3.2" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }